docling
Get your documents ready for gen AI
View on Github
Activity
- Latest release
- 1h ago
- Total releases
- 215
- Cadence
- ~2 days
- Last 12 months
- 87
Reach
- Stars
- 66.4k
Details
- License
- MIT
- First release
- Jul 15, 2024
| Version | Released | |
|---|---|---|
2.127.0
minor
| ||
2.126.0
minor
| ||
2.125.0
minor
| ||
2.124.0
minor
| ||
2.123.1
patch
| ||
2.123.0
minor
| ||
2.122.0
minor
| ||
2.121.0
minor
| ||
2.120.3
patch
| ||
2.120.2
patch
| ||
2.120.1
minor
| ||
2.119.0
minor
| ||
2.118.1
patch
| ||
2.118.0
minor
| ||
2.117.0
minor
| ||
2.116.0
minor
| ||
2.115.0
minor
| ||
2.114.0
minor
| ||
2.113.0
minor
| ||
2.112.0
minor
| ||
2.111.0
minor
| ||
2.110.0
minor
| ||
2.109.0
minor
| ||
2.108.0
minor
| ||
2.107.0
minor
| ||
2.106.0
minor
| ||
2.105.0
minor
| ||
2.104.0
minor
| ||
2.103.0
minor
| ||
2.102.2
patch
| ||
2.102.1
patch
| ||
2.102.0
minor
| ||
2.101.0
minor
| ||
2.100.0
minor
| ||
2.99.0
minor
| ||
2.98.0
minor
| ||
2.97.0
minor
| ||
2.96.1
patch
| ||
2.96.0
minor
| ||
2.95.0
minor
| ||
2.94.0
minor
| ||
2.93.0
minor
1 CVE
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.92.0
minor
1 CVE
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
2.91.0
minor
1 CVE
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev |
2.91.0
minor
Dependencies (47)
+ 39 more
Changelog
Compare changes
|
|
2.90.0
minor
5 CVEs
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44018
PYSEC-2026-2144
GHSA-r3xg-rg9j-67fv
Jun 26, 2026
7.1
/ 10
High
Local
Low
None
Required
Unchanged
High
None
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0. Affected versions
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
+ 43 more Show less
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44022
PYSEC-2026-2145
GHSA-2j5p-7p5m-cvqr
Jun 24, 2026
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
High
None
None
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0. Affected versions
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
+ 7 more Show less
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44017
PYSEC-2026-2143
GHSA-cjqg-rq2h-2fvj
Jun 24, 2026
7.5
/ 10
High
Network
High
None
Required
Unchanged
High
High
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source (via supply chain attack, DNS spoofing, or MITM), they could write arbitrary files to any location writable by the process, potentially achieving remote code execution by overwriting Python files or system binaries, persistent backdoors by modifying startup scripts or SSH keys, and data corruption or system compromise. This vulnerability is fixed in 2.91.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 159 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44016
PYSEC-2026-2142
GHSA-pj2v-ggqh-cmq2
Jun 24, 2026
8.2
/ 10
High
Network
High
None
Required
Changed
High
High
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivated), then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services, potentially leading to SSRF attacks, data exfiltration, or remote code execution in the rendering environment. This vulnerability is fixed in 2.91.0. Affected versions
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
2.90.0
minor
Dependencies (47)
+ 39 more
Changelog
Compare changes
|
|
2.89.0
minor
5 CVEs
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44018
PYSEC-2026-2144
GHSA-r3xg-rg9j-67fv
Jun 26, 2026
7.1
/ 10
High
Local
Low
None
Required
Unchanged
High
None
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0. Affected versions
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
+ 43 more Show less
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44022
PYSEC-2026-2145
GHSA-2j5p-7p5m-cvqr
Jun 24, 2026
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
High
None
None
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0. Affected versions
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
+ 7 more Show less
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44017
PYSEC-2026-2143
GHSA-cjqg-rq2h-2fvj
Jun 24, 2026
7.5
/ 10
High
Network
High
None
Required
Unchanged
High
High
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source (via supply chain attack, DNS spoofing, or MITM), they could write arbitrary files to any location writable by the process, potentially achieving remote code execution by overwriting Python files or system binaries, persistent backdoors by modifying startup scripts or SSH keys, and data corruption or system compromise. This vulnerability is fixed in 2.91.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 159 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44016
PYSEC-2026-2142
GHSA-pj2v-ggqh-cmq2
Jun 24, 2026
8.2
/ 10
High
Network
High
None
Required
Changed
High
High
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivated), then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services, potentially leading to SSRF attacks, data exfiltration, or remote code execution in the rendering environment. This vulnerability is fixed in 2.91.0. Affected versions
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
2.89.0
minor
Dependencies (47)
+ 39 more
Changelog
Compare changes
|
|
2.88.0
minor
5 CVEs
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44018
PYSEC-2026-2144
GHSA-r3xg-rg9j-67fv
Jun 26, 2026
7.1
/ 10
High
Local
Low
None
Required
Unchanged
High
None
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0. Affected versions
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
+ 43 more Show less
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44022
PYSEC-2026-2145
GHSA-2j5p-7p5m-cvqr
Jun 24, 2026
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
High
None
None
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0. Affected versions
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
+ 7 more Show less
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44017
PYSEC-2026-2143
GHSA-cjqg-rq2h-2fvj
Jun 24, 2026
7.5
/ 10
High
Network
High
None
Required
Unchanged
High
High
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source (via supply chain attack, DNS spoofing, or MITM), they could write arbitrary files to any location writable by the process, potentially achieving remote code execution by overwriting Python files or system binaries, persistent backdoors by modifying startup scripts or SSH keys, and data corruption or system compromise. This vulnerability is fixed in 2.91.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 159 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44016
PYSEC-2026-2142
GHSA-pj2v-ggqh-cmq2
Jun 24, 2026
8.2
/ 10
High
Network
High
None
Required
Changed
High
High
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivated), then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services, potentially leading to SSRF attacks, data exfiltration, or remote code execution in the rendering environment. This vulnerability is fixed in 2.91.0. Affected versions
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
2.88.0
minor
Dependencies (47)
+ 39 more
Changelog
Compare changes
|
|
2.87.0
minor
5 CVEs
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44018
PYSEC-2026-2144
GHSA-r3xg-rg9j-67fv
Jun 26, 2026
7.1
/ 10
High
Local
Low
None
Required
Unchanged
High
None
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0. Affected versions
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
+ 43 more Show less
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44022
PYSEC-2026-2145
GHSA-2j5p-7p5m-cvqr
Jun 24, 2026
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
High
None
None
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0. Affected versions
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
+ 7 more Show less
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44017
PYSEC-2026-2143
GHSA-cjqg-rq2h-2fvj
Jun 24, 2026
7.5
/ 10
High
Network
High
None
Required
Unchanged
High
High
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source (via supply chain attack, DNS spoofing, or MITM), they could write arbitrary files to any location writable by the process, potentially achieving remote code execution by overwriting Python files or system binaries, persistent backdoors by modifying startup scripts or SSH keys, and data corruption or system compromise. This vulnerability is fixed in 2.91.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 159 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44016
PYSEC-2026-2142
GHSA-pj2v-ggqh-cmq2
Jun 24, 2026
8.2
/ 10
High
Network
High
None
Required
Changed
High
High
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivated), then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services, potentially leading to SSRF attacks, data exfiltration, or remote code execution in the rendering environment. This vulnerability is fixed in 2.91.0. Affected versions
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
2.87.0
minor
Dependencies (45)
+ 37 more
Changelog
Compare changes
|
|
2.86.0
minor
5 CVEs
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44018
PYSEC-2026-2144
GHSA-r3xg-rg9j-67fv
Jun 26, 2026
7.1
/ 10
High
Local
Low
None
Required
Unchanged
High
None
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0. Affected versions
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
+ 43 more Show less
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44022
PYSEC-2026-2145
GHSA-2j5p-7p5m-cvqr
Jun 24, 2026
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
High
None
None
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0. Affected versions
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
+ 7 more Show less
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44017
PYSEC-2026-2143
GHSA-cjqg-rq2h-2fvj
Jun 24, 2026
7.5
/ 10
High
Network
High
None
Required
Unchanged
High
High
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source (via supply chain attack, DNS spoofing, or MITM), they could write arbitrary files to any location writable by the process, potentially achieving remote code execution by overwriting Python files or system binaries, persistent backdoors by modifying startup scripts or SSH keys, and data corruption or system compromise. This vulnerability is fixed in 2.91.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 159 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44016
PYSEC-2026-2142
GHSA-pj2v-ggqh-cmq2
Jun 24, 2026
8.2
/ 10
High
Network
High
None
Required
Changed
High
High
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivated), then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services, potentially leading to SSRF attacks, data exfiltration, or remote code execution in the rendering environment. This vulnerability is fixed in 2.91.0. Affected versions
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
2.86.0
minor
Dependencies (45)
+ 37 more
Changelog
Compare changes
|
|
2.85.0
minor
5 CVEs
CVE-2026-47214
PYSEC-2026-2146
GHSA-q29v-xc37-wh5m
Jun 26, 2026
7.1
/ 10
High
Network
Low
None
Required
Unchanged
High
None
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 162 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
2.91.0
2.92.0
2.93.0
Fixed in
2.94.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44018
PYSEC-2026-2144
GHSA-r3xg-rg9j-67fv
Jun 26, 2026
7.1
/ 10
High
Local
Low
None
Required
Unchanged
High
None
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0. Affected versions
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
+ 43 more Show less
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44022
PYSEC-2026-2145
GHSA-2j5p-7p5m-cvqr
Jun 24, 2026
5.5
/ 10
Medium
Local
Low
None
Required
Unchanged
High
None
None
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0. Affected versions
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.80.0
2.81.0
2.82.0
2.83.0
+ 7 more Show less
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44017
PYSEC-2026-2143
GHSA-cjqg-rq2h-2fvj
Jun 24, 2026
7.5
/ 10
High
Network
High
None
Required
Unchanged
High
High
High
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source (via supply chain attack, DNS spoofing, or MITM), they could write arbitrary files to any location writable by the process, potentially achieving remote code execution by overwriting Python files or system binaries, persistent backdoors by modifying startup scripts or SSH keys, and data corruption or system compromise. This vulnerability is fixed in 2.91.0. Affected versions
0.1.0
0.1.1
0.1.2
0.2.0
0.3.0
0.3.1
0.4.0
1.0.0
1.0.1
1.0.2
1.1.0
1.1.1
+ 159 more Show less
1.1.2
1.10.0
1.11.0
1.12.0
1.12.1
1.12.2
1.13.0
1.13.1
1.14.0
1.15.0
1.16.0
1.16.1
1.17.0
1.18.0
1.19.0
1.19.1
1.2.0
1.2.1
1.20.0
1.3.0
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.9.0
2.0.0
2.1.0
2.10.0
2.11.0
2.12.0
2.13.0
2.14.0
2.15.0
2.15.1
2.16.0
2.17.0
2.18.0
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.23.1
2.24.0
2.25.0
2.25.1
2.25.2
2.26.0
2.27.0
2.28.0
2.28.1
2.28.2
2.28.3
2.28.4
2.29.0
2.3.0
2.3.1
2.30.0
2.31.0
2.31.1
2.31.2
2.32.0
2.33.0
2.34.0
2.35.0
2.36.0
2.36.1
2.37.0
2.38.0
2.38.1
2.39.0
2.4.0
2.4.1
2.4.2
2.40.0
2.41.0
2.42.0
2.42.1
2.42.2
2.43.0
2.44.0
2.45.0
2.46.0
2.47.0
2.47.1
2.48.0
2.49.0
2.5.0
2.5.1
2.5.2
2.50.0
2.51.0
2.52.0
2.53.0
2.54.0
2.55.0
2.55.1
2.56.0
2.56.1
2.57.0
2.58.0
2.59.0
2.6.0
2.60.0
2.60.1
2.61.0
2.61.1
2.61.2
2.62.0
2.63.0
2.64.0
2.64.1
2.65.0
2.66.0
2.67.0
2.68.0
2.69.0
2.69.1
2.7.0
2.7.1
2.70.0
2.71.0
2.72.0
2.73.0
2.73.1
2.74.0
2.75.0
2.76.0
2.77.0
2.78.0
2.79.0
2.8.0
2.8.1
2.8.2
2.8.3
2.80.0
2.81.0
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.9.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-44016
PYSEC-2026-2142
GHSA-pj2v-ggqh-cmq2
Jun 24, 2026
8.2
/ 10
High
Network
High
None
Required
Changed
High
High
Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivated), then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services, potentially leading to SSRF attacks, data exfiltration, or remote code execution in the rendering environment. This vulnerability is fixed in 2.91.0. Affected versions
2.82.0
2.83.0
2.84.0
2.85.0
2.86.0
2.87.0
2.88.0
2.89.0
2.90.0
Fixed in
2.91.0
References
Updated Jul 13, 2026 · Source: OSV.dev |
2.85.0
minor
Dependencies (44)
+ 36 more
Changelog
Compare changes
|