Skip to content
OpenAdvisories

Package · PyPI

docling

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2026-105744

    Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/te…

    docling-project docling docling-slim docling PyPI
  • High 7.1
    CVE-2026-47214

    Docling: Unsafe URI and Path Handling in HTML Backend

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.

    docling-project docling docling PyPI
  • High 7.5
    CVE-2026-44017

    Docling: Unsafe Zip Extraction in EasyOCR Model Download

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip …

    docling-project docling docling PyPI
  • High 7.5
    CVE-2026-44020

    Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.13.0 until 2.74.0, the USPTO patent XML parser used the standard xml.sax.parseString() without protection against XML Externa…

    docling-project docling docling PyPI
  • High 8.2
    CVE-2026-44016

    Docling: Unsafe Playwright-based HTML Rendering

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivat…

    docling-project docling docling PyPI
  • High 7.5
    CVE-2026-31247

    Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

    Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend uses etree.parse() to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion …

    docling PyPI
  • High 7.5
    CVE-2026-31248

    Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

    Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring() without disabling entity resolution. An attacker can craft a malicious XML …

    docling PyPI