# docling (PyPI) vulnerabilities Source: https://junglewise.ai/threats/technologies/pypi-docling Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/pypi-docling.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in docling (PyPI): 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, Docling METS-GBS archive member limit enforced after full enumeration, was published on 6 October 2026. Nothing in the last four weeks, down from 11 vulnerabilities in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 11 - All time: 19 (0 critical, 0 exploited in the wild) ## About docling (PyPI) Python library for converting and parsing document formats including PDF, HTML, and images into structured data. ## Latest docling (PyPI) vulnerabilities - [Docling METS-GBS archive member limit enforced after full enumeration](https://junglewise.ai/threats/duplicate-advisory-docling-mets-gbs-archive-member-limit-enforced-after-087423a8) (medium, CVSS 4.3, published 6 Oct 2026) - [CVE-2026-105751: Docling arbitrary filesystem read via unvalidated xlink:href in ODF images](https://junglewise.ai/threats/cve-2026-105751-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 4, published 5 Oct 2026) - [CVE-2026-105750: Docling local file disclosure in HTML rendering](https://junglewise.ai/threats/cve-2026-105750-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 5.9, published 5 Oct 2026) - [CVE-2026-105749: Docling unbounded table span allocation denial of service](https://junglewise.ai/threats/cve-2026-105749-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 6.5, published 5 Oct 2026) - [CVE-2026-105748: IBM Docling arbitrary local file read via JSON backend](https://junglewise.ai/threats/cve-2026-105748-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 4.3, published 5 Oct 2026) - [CVE-2026-105747: Docling memory exhaustion in METS-GBS tar archive processing](https://junglewise.ai/threats/cve-2026-105747-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 4.3, published 5 Oct 2026) - [CVE-2026-105746: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…](https://junglewise.ai/threats/cve-2026-105746-docling-simplifies-document-processing-by-parsing-diverse) (low, CVSS 3.1, published 5 Oct 2026) - [CVE-2026-105745: Docling plugin loader arbitrary code execution via compromised entrypoints](https://junglewise.ai/threats/cve-2026-105745-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 6.7, published 5 Oct 2026) - [CVE-2026-105744: Docling arbitrary file read/write in LaTeX TikZ rendering](https://junglewise.ai/threats/cve-2026-105744-docling-simplifies-document-processing-by-parsing-diverse) (high, CVSS 7.5, published 5 Oct 2026) - [CVE-2026-105743: Docling DNS rebinding in URL validation and HTML rendering](https://junglewise.ai/threats/cve-2026-105743-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 4, published 5 Oct 2026) - [CVE-2026-105742: Docling: Configured HTTP headers sent to every remote image host named by a document](https://junglewise.ai/threats/cve-2026-105742-docling-simplifies-document-processing-by-parsing-diverse) (low, CVSS 3.7, published 5 Oct 2026) - [CVE-2026-47214: Docling unsafe URI and path handling in HTML backend](https://junglewise.ai/threats/cve-2026-47214-docling-unsafe-uri-and-path-handling-in-html-backend) (high, CVSS 7.1, published 26 Jun 2026) - [CVE-2026-44018: Docling XXE and resource exhaustion in METS-GBS backend](https://junglewise.ai/threats/cve-2026-44018-docling-xxe-and-resource-exhaustion-in-mets-gbs-backend) (medium, CVSS 5.5, published 26 Jun 2026) - [CVE-2026-44022: Docling path traversal in LaTeX backend](https://junglewise.ai/threats/cve-2026-44022-docling-path-traversal-in-latex-backend) (medium, CVSS 5.5, published 24 Jun 2026) - [CVE-2026-44020: Docling XXE vulnerability in USPTO patent XML parsers](https://junglewise.ai/threats/cve-2026-44020-docling-xxe-vulnerability-in-uspto-patent-xml-parsers) (high, CVSS 7.5, published 24 Jun 2026) - [CVE-2026-44017: Docling Zip Slip path traversal in EasyOCR model download](https://junglewise.ai/threats/cve-2026-44017-docling-zip-slip-path-traversal-in-easyocr-model-download) (high, CVSS 7.5, published 24 Jun 2026) - [CVE-2026-44016: Docling code injection and SSRF in Playwright HTML rendering](https://junglewise.ai/threats/cve-2026-44016-docling-code-injection-and-ssrf-in-playwright-html-rendering) (high, CVSS 8.2, published 24 Jun 2026) - [CVE-2026-31248: Docling XML Entity Expansion in METS GBS backend](https://junglewise.ai/threats/cve-2026-31248-docling-xml-entity-expansion-in-mets-gbs-backend) (high, CVSS 7.5, published 11 May 2026) - [CVE-2026-31247: Docling XXE in JATS XML backend](https://junglewise.ai/threats/cve-2026-31247-docling-xxe-in-jats-xml-backend) (high, CVSS 7.5, published 11 May 2026) ## Most severe docling (PyPI) vulnerabilities - [CVE-2026-44016: Docling code injection and SSRF in Playwright HTML rendering](https://junglewise.ai/threats/cve-2026-44016-docling-code-injection-and-ssrf-in-playwright-html-rendering) (high, CVSS 8.2, published 24 Jun 2026) - [CVE-2026-44017: Docling Zip Slip path traversal in EasyOCR model download](https://junglewise.ai/threats/cve-2026-44017-docling-zip-slip-path-traversal-in-easyocr-model-download) (high, CVSS 7.5, published 24 Jun 2026) - [CVE-2026-44020: Docling XXE vulnerability in USPTO patent XML parsers](https://junglewise.ai/threats/cve-2026-44020-docling-xxe-vulnerability-in-uspto-patent-xml-parsers) (high, CVSS 7.5, published 24 Jun 2026) - [CVE-2026-31248: Docling XML Entity Expansion in METS GBS backend](https://junglewise.ai/threats/cve-2026-31248-docling-xml-entity-expansion-in-mets-gbs-backend) (high, CVSS 7.5, published 11 May 2026) - [CVE-2026-31247: Docling XXE in JATS XML backend](https://junglewise.ai/threats/cve-2026-31247-docling-xxe-in-jats-xml-backend) (high, CVSS 7.5, published 11 May 2026) - [CVE-2026-105744: Docling arbitrary file read/write in LaTeX TikZ rendering](https://junglewise.ai/threats/cve-2026-105744-docling-simplifies-document-processing-by-parsing-diverse) (high, CVSS 7.5, published 5 Oct 2026) - [CVE-2026-47214: Docling unsafe URI and path handling in HTML backend](https://junglewise.ai/threats/cve-2026-47214-docling-unsafe-uri-and-path-handling-in-html-backend) (high, CVSS 7.1, published 26 Jun 2026) - [CVE-2026-105745: Docling plugin loader arbitrary code execution via compromised entrypoints](https://junglewise.ai/threats/cve-2026-105745-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 6.7, published 5 Oct 2026) - [CVE-2026-105749: Docling unbounded table span allocation denial of service](https://junglewise.ai/threats/cve-2026-105749-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 6.5, published 5 Oct 2026) - [CVE-2026-105750: Docling local file disclosure in HTML rendering](https://junglewise.ai/threats/cve-2026-105750-docling-simplifies-document-processing-by-parsing-diverse) (medium, CVSS 5.9, published 5 Oct 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 11 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 11 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PyPI technologies - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "docling (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/pypi-docling, 13 November 2026.