Docling-project

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 23
    Known Exploited: 0
    0
    Critical Level Threats
    11
    High Level Threats
    9
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-108749

    docling-serve: docling-serve: Information disclosure via missing authentication on memory endpoints

    Last Modified: Oct 16, 2026
    Published: Oct 11, 2026

    CVE-2026-105751

    Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

    Last Modified: Oct 16, 2026
    Published: Oct 05, 2026

    CVE-2026-105750

    Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

    Last Modified: Oct 07, 2026
    Published: Oct 05, 2026

    CVE-2026-105749

    Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

    Last Modified: Oct 08, 2026
    Published: Oct 05, 2026

    CVE-2026-105748

    Docling: Crafted DoclingDocument JSON embeds local image files into converted output

    Last Modified: Oct 07, 2026
    Published: Oct 05, 2026
    Items Per Page
    Docling-Project Vulnerabilities & Security CVEs | CVE-DB