Vulnerabilities for docling

First version without a known vulnerability: 2.132.0

Details

• GHSA-p3fw-7699-79262026-10-07

  Docling: Configured HTTP headers sent to every remote image host named by a document

  Fixed in: 2.132.0

• GHSA-pc36-qwjq-x68c2026-10-07

  Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)

  Fixed in: 2.132.0

• GHSA-x3q2-h9hx-4r4j2026-10-07

  Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

  Fixed in: 2.132.0

• GHSA-p944-4xh2-x7762026-10-07

  Docling: Crafted DoclingDocument JSON embeds local image files into converted output

  Fixed in: 2.131.0

• GHSA-cgc7-9qp3-86m32026-10-07

  Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

  Fixed in: 2.131.0

• GHSA-9jxx-vjrv-h2rq2026-10-07

  Docling imports plugin entry points before the allow_external_plugins check

  Fixed in: 2.131.0

• GHSA-3cr3-8m4c-fpxw2026-10-06

  Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

  Fixed in: 2.131.0

• GHSA-q43m-vhcp-mhvm2026-10-06

  Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

  Fixed in: 2.118.1

• GHSA-4xhp-xg4w-8ppm2026-10-05

  Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

  Fixed in: 2.120.3

• GHSA-q29v-xc37-wh5m2026-06-03

  Docling: Unsafe URI and Path Handling in HTML Backend

  Fixed in: 2.94.0

• GHSA-2j5p-7p5m-cvqr2026-06-03

  Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

  Fixed in: 2.91.0

• GHSA-m88r-rg27-5xfg2026-06-03

  Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

  Fixed in: 2.74.0

• GHSA-r3xg-rg9j-67fv2026-06-03

  Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

  Fixed in: 2.91.0

• GHSA-pj2v-ggqh-cmq22026-06-03

  Docling: Unsafe Playwright-based HTML Rendering

  Fixed in: 2.91.0

• GHSA-cjqg-rq2h-2fvj2026-06-03

  Docling: Unsafe Zip Extraction in EasyOCR Model Download

  Fixed in: 2.91.0

• GHSA-9f4q-q82q-43592026-05-11

  Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

• GHSA-cr42-rg2m-mq4q2026-05-11

  Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks