doclingGHSA-9f4q-q82q-4359
Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks
High7.5CVE-2026-31248 · Published May 11, 2026 · updated Jul 13, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| docling PyPI | <= 2.61.0 | No fix yet |
Details and references
Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring() without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions (XML Bomb) and package it into a .tar.gz archive. When processed by Docling, the exponential expansion of entities during XML parsing leads to excessive resource consumption, resulting in a denial of service (DoS) condition on the system running the Docling parser.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-776
- Also known as
- CVE-2026-31248, PYSEC-2026-2454
More docling advisories
All| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| May 11 | Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks CVE-2026-31247High7.5no fix yet | High7.5 | No fix yet |
| Jun 3 | Docling: Unsafe Zip Extraction in EasyOCR Model Download CVE-2026-44017High7.5fixed in 2.91.0 | High7.5 | 2.91.0 |
| Jun 3 | Docling: Unsafe Playwright-based HTML Rendering CVE-2026-44016High8.2fixed in 2.91.0 | High8.2 | 2.91.0 |
| Jun 3 | Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend CVE-2026-44018Medium5.5fixed in 2.91.0 | Medium5.5 | 2.91.0 |
| Jun 3 | Docling: Unsafe XML Entity Expansion in USPTO Patent Backend CVE-2026-44020High7.5fixed in 2.74.0 | High7.5 | 2.74.0 |
| Jun 3 | Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands CVE-2026-44022Medium5.5fixed in 2.91.0 | Medium5.5 | 2.91.0 |