python3Packages.docling-slim

GHSA-3cr3-8m4c-fpxw medium 4.3 EPSS 0.2% Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection) (OSV, for this version)

GHSA-9jxx-vjrv-h2rq medium 6.7 EPSS 0.1% Docling imports plugin entry points before the allow_external_plugins check (OSV, for this version)

GHSA-cgc7-9qp3-86m3 medium 6.5 public exploit EPSS 0.3% Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion (OSV, for this version)

GHSA-p3fw-7699-7926 low 3.7 public exploit EPSS 0.2% Docling: Configured HTTP headers sent to every remote image host named by a document (OSV, for this version)

GHSA-p944-4xh2-x776 medium 4.3 public exploit EPSS 0.2% Docling: Crafted DoclingDocument JSON embeds local image files into converted output (OSV, for this version)

GHSA-pc36-qwjq-x68c medium 4.0 EPSS 0.2% Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode) (OSV, for this version)

GHSA-q43m-vhcp-mhvm medium 5.9 EPSS 0.3% Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode (OSV, for this version)

GHSA-x3q2-h9hx-4r4j high 7.5 public exploit EPSS 0.3% Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine (OSV, for this version)