Advisoriesby Ibis
docling security advisories
18 advisories · 7 critical or high in 12 months · latest Oct 7
18 advisories
Docling: Configured HTTP headers sent to every remote image host named by a documentCVE-2026-105742fixed in 2.132.0docling: race conditionCVE-2026-105743fixed in 2.132.0docling: insecure defaultCVE-2026-105744fixed in 2.132.0Docling: Crafted DoclingDocument JSON embeds local image files into converted outputCVE-2026-105748fixed in 2.131.0Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustionCVE-2026-105749fixed in 2.131.0Docling imports plugin entry points before the allow_external_plugins checkCVE-2026-105745fixed in 2.131.0docling: resource exhaustionCVE-2026-105747fixed in 2.131.0Docling: `enable_local_fetch` is not enforced in HTML browser-rendering modeCVE-2026-105750fixed in 2.118.1Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backendCVE-2026-105751fixed in 2.120.3Docling simplifies document processing by parsing diverse formats and providing...CVE-2026-105746fixed in 2.131.0Docling: Unsafe URI and Path Handling in HTML BackendCVE-2026-47214fixed in 2.94.0Docling: Potential Path Traversal via LaTeX \includegraphics and \input CommandsCVE-2026-44022fixed in 2.91.0Docling: Unsafe XML Entity Expansion in USPTO Patent BackendCVE-2026-44020fixed in 2.74.0Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS BackendCVE-2026-44018fixed in 2.91.0Docling: Unsafe Playwright-based HTML RenderingCVE-2026-44016fixed in 2.91.0Docling: Unsafe Zip Extraction in EasyOCR Model DownloadCVE-2026-44017fixed in 2.91.0Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacksCVE-2026-31248no fix yetDocling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacksCVE-2026-31247no fix yet