docling

9 records · 9 with a public proof-of-concept

Disclosed vulnerabilities where the NVD names docling as an affected vendor, highest CVSS first.

  1. HIGH 7.5CVE-2026-105744public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tec…

    docling

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.7CVE-2026-105745public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/base_factory.py call load_setuptools_entrypoints() be…

    docling

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 6.5CVE-2026-105749public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until 2.131.0, the HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/html_backend.py, …

    docling

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5.9CVE-2026-105750public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.82.0 until 2.118.1, HTMLBackendOptions(render_page=True) permits file URLs because HTMLDocumentBackend._get_browser_request_bl…

    docling

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 4.3CVE-2026-105748public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSON_DOCLING backend in docling/backend/json/docling_json_backend.py validates serialized …

    docling

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 4.3CVE-2026-105747public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/mets_gbs_bac…

    docling

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 4CVE-2026-105743public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until 2.132.0, validate_url_safety in docling/backend/utils/image_resource_loader.py validates a hostname with a single I…

    docling

    AI risk analysis on Exploit-DB.ai →

  8. LOW 3.7CVE-2026-105742public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards headers configur…

    docling

    AI risk analysis on Exploit-DB.ai →

  9. LOW 2.2CVE-2026-105746public PoC2026-10-05

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kserve_v2_ocr_model.py sends page images t…

    docling

    AI risk analysis on Exploit-DB.ai →