docling-slim vulnerabilities

3 known vulnerabilities in docling-slim from Docling-project. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  docling: Files or Directories Accessible to External Parties

  CVE-2026-105750Oct 5, 2026Docling-project

  Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.82.0 until 2.118.1, HTMLBackendOptions(render_page=True) permits file URLs because HTMLDocumentBackend._get_browser_request_bl

• 7.8 High severity

  docling: Incorrect Behavior Order

  CVE-2026-105745Oct 5, 2026Docling-project

  Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/base_factory.py call load_setuptools_entrypoints() be

• 8.8 High severity

  docling: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-105744Oct 5, 2026Docling-project

  Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tec