CVE-2026-105751
2 advisories.
PyPI/docling CVE-2026-105751: medium
Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend
Action: Upgrade docling to 2.120.3 or later.
pip install docling==2.120.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.107.0 | 2.120.3 | - |
Fixed versions
| 2.120.3 |
Sources
- osv: GHSA-4xhp-xg4w-8ppm
- https://github.com/docling-project/docling/security/advisories/GHSA-4xhp-xg4w-8ppm
- https://github.com/docling-project/docling/pull/4015
- https://github.com/docling-project/docling/commit/6ee9965adfc364b3696a67c825ec2f0d9cee4311
- https://github.com/docling-project/docling
- https://github.com/docling-project/docling/releases/tag/v2.120.3
CVE-2026-105751 · published · modified · JSON
PyPI/docling CVE-2026-105751: unknown
Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend
Action: Upgrade docling to 2.120.3 or later.
pip install docling==2.120.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.107.0 | 2.120.3 | - |
Fixed versions
| 2.120.3 |
Sources
- osv: PYSEC-2026-4207
- https://github.com/docling-project/docling/security/advisories/GHSA-4xhp-xg4w-8ppm
- https://github.com/docling-project/docling/pull/4015
- https://github.com/docling-project/docling/commit/6ee9965adfc364b3696a67c825ec2f0d9cee4311
- https://github.com/docling-project/docling
- https://github.com/docling-project/docling/releases/tag/v2.120.3
- https://pypi.org/project/docling
- https://github.com/advisories/GHSA-4xhp-xg4w-8ppm
- https://nvd.nist.gov/vuln/detail/CVE-2026-105751
CVE-2026-105751 · published · modified · JSON