{"data":{"ecosystem":"pypi","name":"docling","url":"https://aisecwatch.com/packages/pypi/docling","latestVersion":"2.137.0","firstReleaseAt":"2024-07-15T06:56:04.943Z","repository":"https://github.com/docling-project/docling","llm":{"exposure":"none","depth":null,"integratedAt":null,"integratedVersion":null,"sdks":[],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"pypi","name":"docling-slim","versionSpec":"==2.137.0","scope":"runtime"}],"advisories":[{"id":"5e03a772-7394-489b-b36d-c84fe1c6a075","url":"https://aisecwatch.com/issues/5e03a772-7394-489b-b36d-c84fe1c6a075","cveId":null,"title":"GHSA-f4ch-vxwc-3p2m: Duplicate Advisory:  Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)","headline":null,"severity":"medium","publishedAt":"2026-10-06T00:32:49.000Z","affected":["docling@>= 2.45.0, < 2.131.0 (fixed: 2.131.0)"],"epssScore":null},{"id":"50ab73b4-65e3-41c9-93a6-343695bc68fc","url":"https://aisecwatch.com/issues/50ab73b4-65e3-41c9-93a6-343695bc68fc","cveId":"CVE-2026-105751","title":"CVE-2026-105751: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling local file read through image references in OpenDocument files","severity":"medium","publishedAt":"2026-10-05T22:16:58.253Z","affected":["docling@>= 2.107.0, < 2.120.3 (fixed: 2.120.3)"],"epssScore":0.00366},{"id":"ddb099eb-76e2-40de-bc25-fe67e4b59be5","url":"https://aisecwatch.com/issues/ddb099eb-76e2-40de-bc25-fe67e4b59be5","cveId":"CVE-2026-105750","title":"CVE-2026-105750: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling local file read through browser-rendered HTML page images","severity":"medium","publishedAt":"2026-10-05T22:16:58.097Z","affected":["docling@>= 2.82.0, < 2.118.1 (fixed: 2.118.1)","docling-slim@>= 2.92.0, < 2.118.1 (fixed: 2.118.1)"],"epssScore":0.00301},{"id":"cb3ae136-6692-4d02-9b62-08bde0ca28e1","url":"https://aisecwatch.com/issues/cb3ae136-6692-4d02-9b62-08bde0ca28e1","cveId":"CVE-2026-105749","title":"CVE-2026-105749: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling resource exhaustion via unbounded table span attributes","severity":"medium","publishedAt":"2026-10-05T22:16:57.943Z","affected":["docling@>= 2.0.0, < 2.131.0 (fixed: 2.131.0)","docling-slim@>= 2.92.0, < 2.131.0 (fixed: 2.131.0)"],"epssScore":0.00266},{"id":"ec2be969-ba55-48f4-b15e-52e3a8d377a1","url":"https://aisecwatch.com/issues/ec2be969-ba55-48f4-b15e-52e3a8d377a1","cveId":"CVE-2026-105748","title":"CVE-2026-105748: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling JSON backend local file read through picture image references","severity":"medium","publishedAt":"2026-10-05T22:16:57.793Z","affected":["docling@>= 2.16.0, < 2.131.0 (fixed: 2.131.0)","docling-slim@>= 2.92.0, < 2.131.0 (fixed: 2.131.0)"],"epssScore":0.00222},{"id":"6c71273f-f958-4b9b-97f5-a2363228cfc0","url":"https://aisecwatch.com/issues/6c71273f-f958-4b9b-97f5-a2363228cfc0","cveId":"CVE-2026-105747","title":"CVE-2026-105747: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling memory exhaustion from tar archive member listing in METS-GBS parsing","severity":"medium","publishedAt":"2026-10-05T22:16:57.633Z","affected":["docling@>= 2.45.0, < 2.131.0 (fixed: 2.131.0)","docling-slim@>= 2.92.0, < 2.131.0 (fixed: 2.131.0)"],"epssScore":0.0023},{"id":"a7a0c690-9b48-4c68-875c-3e8f241fffc7","url":"https://aisecwatch.com/issues/a7a0c690-9b48-4c68-875c-3e8f241fffc7","cveId":"CVE-2026-105745","title":"CVE-2026-105745: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling plugin loading runs entry-point modules when plugins are disabled","severity":"medium","publishedAt":"2026-10-05T22:16:57.330Z","affected":["docling@>= 2.27.0, < 2.131.0 (fixed: 2.131.0)","docling-slim@>= 2.92.0, < 2.131.0 (fixed: 2.131.0)"],"epssScore":0.0012},{"id":"6ca43485-821c-42b8-87a0-4d0cbf2863be","url":"https://aisecwatch.com/issues/6ca43485-821c-42b8-87a0-4d0cbf2863be","cveId":"CVE-2026-105744","title":"CVE-2026-105744: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling file read and write through TikZ rendering with Tectonic engine","severity":"high","publishedAt":"2026-10-05T22:16:57.177Z","affected":["docling@>= 2.94.0, < 2.132.0 (fixed: 2.132.0)","docling-slim@>= 2.94.0, < 2.132.0 (fixed: 2.132.0)"],"epssScore":0.00344},{"id":"ff5cbe03-9623-4ad8-bde3-d601d741bddf","url":"https://aisecwatch.com/issues/ff5cbe03-9623-4ad8-bde3-d601d741bddf","cveId":"CVE-2026-105743","title":"CVE-2026-105743: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":null,"severity":"medium","publishedAt":"2026-10-05T22:16:57.030Z","affected":["docling@>= 2.91.0, < 2.132.0 (fixed: 2.132.0)","docling-slim@>= 2.92.0, < 2.132.0 (fixed: 2.132.0)"],"epssScore":0.0019},{"id":"6ac68dc8-d817-4d37-b476-1a4e87561968","url":"https://aisecwatch.com/issues/6ac68dc8-d817-4d37-b476-1a4e87561968","cveId":"CVE-2026-105742","title":"CVE-2026-105742: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling image resource loader leaks configured headers to cross-origin redirects","severity":"low","publishedAt":"2026-10-05T22:16:56.867Z","affected":["docling@>= 2.95.0, < 2.132.0 (fixed: 2.132.0)","docling-slim@>= 2.95.0, < 2.132.0 (fixed: 2.132.0)"],"epssScore":0.00226},{"id":"d6bbe924-4329-45b8-a4f8-5a8471a96388","url":"https://aisecwatch.com/issues/d6bbe924-4329-45b8-a4f8-5a8471a96388","cveId":"CVE-2026-47214","title":"CVE-2026-47214: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling HTML backend unsafe URI and path handling","severity":"high","publishedAt":"2026-06-26T16:16:31.373Z","affected":["docling@< 2.94.0 (fixed: 2.94.0)"],"epssScore":0.00373},{"id":"7fa0cbb9-70b6-4a95-bb30-33dde0f6b654","url":"https://aisecwatch.com/issues/7fa0cbb9-70b6-4a95-bb30-33dde0f6b654","cveId":"CVE-2026-44018","title":"CVE-2026-44018: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling METS-GBS backend XML parsing flaw in archive processing","severity":"medium","publishedAt":"2026-06-26T16:16:30.767Z","affected":["docling@>= 2.45.0, < 2.91.0 (fixed: 2.91.0)"],"epssScore":0.00161},{"id":"af135b3a-ffb7-4dbf-90eb-8d990eb04dc9","url":"https://aisecwatch.com/issues/af135b3a-ffb7-4dbf-90eb-8d990eb04dc9","cveId":"CVE-2026-44022","title":"CVE-2026-44022: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling LaTeX backend path traversal via includegraphics, input and include","severity":"medium","publishedAt":"2026-06-24T18:17:17.593Z","affected":["docling@>= 2.73.0, < 2.91.0 (fixed: 2.91.0)"],"epssScore":0.00207},{"id":"4cc3e61d-030c-4191-89a2-62bd2560f6a0","url":"https://aisecwatch.com/issues/4cc3e61d-030c-4191-89a2-62bd2560f6a0","cveId":"CVE-2026-44020","title":"CVE-2026-44020: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling USPTO patent XML parser XXE file read and SSRF via crafted XML","severity":"high","publishedAt":"2026-06-24T18:17:17.467Z","affected":["docling@>= 2.13.0, < 2.74.0 (fixed: 2.74.0)"],"epssScore":0.00601},{"id":"5ec03d24-c062-451b-8577-15dc864bcea5","url":"https://aisecwatch.com/issues/5ec03d24-c062-451b-8577-15dc864bcea5","cveId":"CVE-2026-44017","title":"CVE-2026-44017: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling zip slip in EasyOCR model download extraction","severity":"high","publishedAt":"2026-06-24T18:17:17.337Z","affected":["docling@< 2.91.0 (fixed: 2.91.0)"],"epssScore":0.00706},{"id":"f4cce2b5-f08d-4be4-9da7-103f5bb8fc1f","url":"https://aisecwatch.com/issues/f4cce2b5-f08d-4be4-9da7-103f5bb8fc1f","cveId":"CVE-2026-44016","title":"CVE-2026-44016: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","headline":"Docling HTML backend allows JavaScript execution and unrestricted network access","severity":"high","publishedAt":"2026-06-24T18:17:16.353Z","affected":["docling@>= 2.82.0, < 2.91.0 (fixed: 2.91.0)"],"epssScore":0.00593}],"checkedAt":"2026-10-09T22:06:05.500Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}