Skip to content
OpenAdvisories

Vendor

docling-project

21 known vulnerabilities.

Products

docling 16 docling-slim 9 docling-core 4 docling-graph 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.2
    CVE-2026-105746

    Docling: KServe v2 OCR engine does not enforce enable_remote_services

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kserve_v2_ocr_model.py sends page images …

    docling-project docling docling-slim docling PyPI
  • Low 3.7
    CVE-2026-105742

    Docling: Configured HTTP headers sent to every remote image host named by a document

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards headers configu…

    docling-project docling docling-slim docling PyPI