{"data":{"id":"f4cce2b5-f08d-4be4-9da7-103f5bb8fc1f","title":"CVE-2026-44016: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","summary":"Docling versions 2.82.0 up to but not including 2.91.0 are affected when the HTML backend is explicitly configured for rendering, which is off by default. The Playwright-based rendering feature can run JavaScript and make unrestricted network requests while processing untrusted HTML, letting an attacker craft HTML that reaches internal services and exfiltrates data or executes code in the rendering environment.","solution":"Fixed in 2.91.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-44016","publishedAt":"2026-06-24T18:17:16.353Z","cveId":"CVE-2026-44016","cweIds":["CWE-94","CWE-918"],"cvssScore":"8.2","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["docling@>= 2.82.0, < 2.91.0 (fixed: 2.91.0)"],"affectedPackageNames":["docling"],"affectedPackageRefs":["pypi:docling"],"affectedVendors":[],"affectedVendorsRaw":["Docling"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Docling HTML backend allows JavaScript execution and unrestricted network access","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00593,"epssCheckedAt":"2026-11-09T12:10:44.972Z","kevDateAdded":null,"advisoryAliases":["GHSA-pj2v-ggqh-cmq2"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:29.113Z","patchAvailable":true,"disclosureDate":"2026-06-24T18:17:16.353Z","fixReleasedAt":"2026-04-23T09:30:35.367Z","daysToFix":-62,"fixCheckedAt":"2026-10-29T21:33:49.967Z","capecIds":["CAPEC-242","CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"docling","fixedVersion":"2.91.0","matchedVersion":"2.91.0","fixReleasedAt":"2026-04-23T09:30:35.367Z","daysToFix":-62,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:33:49.821Z"}]}}