Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Docling: Unsafe Playwright-based HTML Rendering

Docling: Plugin entry points are imported before the allow_external_plugins check

Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

Docling: Unsafe Zip Extraction in EasyOCR Model Download

Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

Docling: Unsafe URI and Path Handling in HTML Backend

Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)

Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

Docling: KServe v2 OCR engine does not enforce enable_remote_services

Docling: Configured HTTP headers sent to every remote image host named by a document

Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)