Vulnerabilities in docling-project

6 results

CVE-2026-24009HIGHDocling Core vulnerable to Remote Code Execution via unsafe PyYAML usageEPSS 1.4%CVE-2026-44017HIGHDocling: Unsafe Zip Extraction in EasyOCR Model DownloadEPSS 0.4%CVE-2026-44016HIGHDocling: Unsafe Playwright-based HTML RenderingEPSS 0.3%CVE-2026-44020HIGHDocling: Unsafe XML Entity Expansion in USPTO Patent BackendEPSS 0.3%CVE-2026-44520MEDIUMDocling-Graph: SSRF via Missing Internal IP Validation in URLInputHandlerEPSS 0.2%CVE-2026-44022MEDIUMDocling: Potential Path Traversal via LaTeX \includegraphics and \input CommandsEPSS 0.1%