Skip to content
OpenAdvisories

Product · Mindee

docTR

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-112304

    docTR through 1.1.0 Unsafe Deserialization RCE via load_pretrained_params()

    docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to…

    Mindee docTR