docling vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-47214Highdocling: Docling: Unsafe URI and Path Handling in HTML Backend CVE-2026-44022Mediumdocling: Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands CVE-2026-44020Highdocling: Docling: Unsafe XML Entity Expansion in USPTO Patent Backend CVE-2026-44018Mediumdocling: Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend CVE-2026-44016Highdocling: Docling: Unsafe Playwright-based HTML Rendering CVE-2026-44017Highdocling: Docling: Unsafe Zip Extraction in EasyOCR Model Download CVE-2026-31248Highdocling: Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks CVE-2026-31247Highdocling: Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo