DO
Product
docling-slim
9
CVEs
0
On KEV
8.8
Max CVSS
9
New 30D
Severity mix
Critical 0High 3Medium 6Low 0
Watch
Add docling-slim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105744 | 8.8 | Oct 5 | Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine Affected: >= 2.94.0, < 2.132.0 |
| CVE-2026-105745 | 7.8 | Oct 5 | Docling: Plugin entry points are imported before the allow_external_plugins check Affected: >= 2.27.0, < 2.131.0 |
| CVE-2026-105750 | 7.5 | Oct 5 | Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode Affected: >= 2.92.0, < 2.118.1 |
Showing 3