Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-q43m-vhcp-mhvm
  • PyPI/docling
  • PyPI/docling-slim
 Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode 11 hours ago
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-4xhp-xg4w-8ppm
  • PyPI/docling
 Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend 12 hours ago
  • Fix available
  • Severity - 6.9 (Medium)
PYSEC-2026-2457
  • PyPI/docling-core
 Docling Core: Unsafe remote filename resolution 13 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-2456
  • PyPI/docling-core
 Docling Core: Insufficient validation of image reference URIs 13 Jul
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-2454
  • PyPI/docling
 Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks 13 Jul
  • No fix available
  • Severity - 7.5 (High)
PYSEC-2026-2455
  • PyPI/docling
 Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks 13 Jul
  • No fix available
  • Severity - 7.5 (High)
PYSEC-2026-2458
  • PyPI/docling-graph
 docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler 13 Jul
  • Fix available
  • Severity - 5.7 (Medium)
PYSEC-2026-1313
  • PyPI/docling-core
 docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage 07 Jul
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-2146
  • PyPI/docling
 See record for full details 26 Jun
  • Fix available
  • Severity - 7.1 (High)
PYSEC-2026-2144
  • PyPI/docling
 See record for full details 26 Jun
  • Fix available
  • Severity - 7.1 (High)
PYSEC-2026-2145
  • PyPI/docling
 See record for full details 24 Jun
  • Fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-240
  • PyPI/docling
 See record for full details 24 Jun
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-2143
  • PyPI/docling
 See record for full details 24 Jun
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-2142
  • PyPI/docling
 See record for full details 24 Jun
  • Fix available
  • Severity - 8.2 (High)
GHSA-jmmv-h3mp-59v8
  • PyPI/docling-core
 Docling Core: Unsafe remote filename resolution 03 Jun
  • Fix available
  • Severity - 8.6 (High)
GHSA-j5xp-7m2f-49jv
  • PyPI/docling-core
 Docling Core: Insufficient validation of image reference URIs 03 Jun
  • Fix available
  • Severity - 8.1 (High)
Load more...