Skip to content
OpenAdvisories

Product · docling-project

docling-graph

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.7
    CVE-2026-44520

    Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandler

    Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler class in docling_graph/core/input/handlers.py makes HTTP requests to user-supplied …

    docling-project docling-graph docling-graph PyPI