Vulnerabilities for docling

First version without a known vulnerability: 2.94.0

Details

• GHSA-q29v-xc37-wh5m2026-06-03

  Docling: Unsafe URI and Path Handling in HTML Backend

  Fixed in: 2.94.0

• GHSA-2j5p-7p5m-cvqr2026-06-03

  Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

  Fixed in: 2.91.0

• GHSA-m88r-rg27-5xfg2026-06-03

  Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

  Fixed in: 2.74.0

• GHSA-r3xg-rg9j-67fv2026-06-03

  Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

  Fixed in: 2.91.0

• GHSA-pj2v-ggqh-cmq22026-06-03

  Docling: Unsafe Playwright-based HTML Rendering

  Fixed in: 2.91.0

• GHSA-cjqg-rq2h-2fvj2026-06-03

  Docling: Unsafe Zip Extraction in EasyOCR Model Download

  Fixed in: 2.91.0

• GHSA-9f4q-q82q-43592026-05-11

  Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

• GHSA-cr42-rg2m-mq4q2026-05-11

  Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks