Loading
Docling document processing components as a standalone Langflow Extension Bundle.
Declares an LLM dependency since 2026-09-11 (version 0.1.7rc0).
Advisories that name lfx-docling as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| GHSA-j8f7-x8jm-wmm4: Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling) | Medium | < 0.1.2 | 0.1.2 | 2026-10-06 |
As declared in PyPI metadata for version 0.2.0. Optional extras are listed with their extra name.
Among the packages in the registry; not every dependent on PyPI.