Docling

Docling

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.9

CVE-2026-105751

  • EPSS 0.37%
  • Veröffentlicht 05.10.2026 21:40:45
  • Zuletzt bearbeitet 06.10.2026 17:17:19

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendocument_backend.py uses the xlink:href attribute value of a draw:image ele...

7.5

CVE-2026-105750

  • EPSS 0.3%
  • Veröffentlicht 05.10.2026 21:38:28
  • Zuletzt bearbeitet 07.10.2026 17:52:51

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.82.0 until 2.118.1, HTMLBackendOptions(render_page=True) permits file URLs because HTMLDocumentBackend._get_browser_...

6.5

CVE-2026-105749

Exploit
  • EPSS 0.26%
  • Veröffentlicht 05.10.2026 21:36:53
  • Zuletzt bearbeitet 08.10.2026 03:16:35

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until 2.131.0, the HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/html_ba...

4.3

CVE-2026-105748

Exploit
  • EPSS 0.22%
  • Veröffentlicht 05.10.2026 21:34:25
  • Zuletzt bearbeitet 07.10.2026 18:47:00

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSON_DOCLING backend in docling/backend/json/docling_json_backend.py validates s...

4.3

CVE-2026-105747

  • EPSS 0.23%
  • Veröffentlicht 05.10.2026 21:32:34
  • Zuletzt bearbeitet 07.10.2026 18:54:39

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/me...

5.3

CVE-2026-105746

  • EPSS 0.22%
  • Veröffentlicht 05.10.2026 21:31:12
  • Zuletzt bearbeitet 07.10.2026 19:02:09

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kserve_v2_ocr_model.py sends pag...

7.8

CVE-2026-105745

  • EPSS 0.11%
  • Veröffentlicht 05.10.2026 21:29:23
  • Zuletzt bearbeitet 07.10.2026 19:18:20

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/base_factory.py call load_setuptools_entryp...

8.8

CVE-2026-105744

Exploit
  • EPSS 0.3%
  • Veröffentlicht 05.10.2026 21:26:56
  • Zuletzt bearbeitet 07.10.2026 19:33:16

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/e...

5.8

CVE-2026-105743

  • EPSS 0.19%
  • Veröffentlicht 05.10.2026 21:23:45
  • Zuletzt bearbeitet 08.10.2026 03:16:34

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until 2.132.0, validate_url_safety in docling/backend/utils/image_resource_loader.py validates a hostname with ...

5.3

CVE-2026-105742

Exploit
  • EPSS 0.22%
  • Veröffentlicht 05.10.2026 21:21:43
  • Zuletzt bearbeitet 07.10.2026 19:52:37

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards header...