EUVD-2026-92812
GHSA-cgc7-9qp3-86m3
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Any unauthenticated attacker-supplied document triggers the flaw (AV:N/AC:L/PR:N) but a victim service must ingest it (UI:R); impact is availability-only resource exhaustion (A:H, C:N/I:N).
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
2Blast Radius
ecosystem impact- 2 pypi packages depend on docling-slim (1 direct, 1 indirect)
Ecosystem-wide dependent count for version 2.92.0.
DescriptionCVE.org
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until 2.131.0, the HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/html_backend.py, docling/backend/jats_backend.py, and docling/backend/boxnote_backend.py, accept the rowspan and colspan attribute values without an upper bound and execute loops or allocate a table grid proportional to the declared span. A very small document can therefore cause sustained CPU use or multi-gigabyte memory allocation, and the document_timeout setting does not interrupt the single backend conversion call. Export through the TableData.grid property can further materialize the oversized grid. This issue is fixed in 2.131.0.
AnalysisAI
Unbounded rowspan/colspan attribute handling in Docling 2.0.0 through 2.130.x lets a deliberately crafted document force sustained CPU consumption or multi-gigabyte memory allocation during table parsing, denying service to the process doing the conversion. Four document backends are affected - HTML, JATS, OpenDocument spreadsheet, and BoxNote - and the built-in document_timeout setting does not interrupt the single backend conversion call, so the usual safeguard against runaway parses is ineffective. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the target to parse an attacker-supplied document through one of Docling's affected backends - HTML (html_backend.py), JATS (jats_backend.py), OpenDocument spreadsheet (opendocument_backend.py), or BoxNote (boxnote_backend.py) - in versions 2.0.0 up to but not including 2.131.0. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a credible but moderate-severity denial-of-service issue, accurately rated at CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade to Docling 2.131.0 or later (release at https://github.com/docling-project/docling/releases/tag/v2.131.0), which incorporates PR #4414 and commit c5b4429cc6500a344c13edeb22e67610c2159b09 that clamp rowspan/colspan to table bounds and enforce MAX_COLSPAN/MAX_ROWSPAN. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Docling Slim
View allLocal file disclosure in Docling allows crafted HTML to embed readable files from the host filesystem into the rendered
Docling 2.94.0 through 2.131.x allows an attacker-supplied LaTeX/TikZ document to read files accessible to the converter
Import-time code execution in Docling 2.27.0 through 2.131.0 lets any distribution already present in the same Python en
Server-side request forgery in Docling 2.91.0 through 2.131.x lets an attacker-supplied document reach internal services
Docling 2.83.0 through 2.130.x ignores the enable_remote_services=False policy when OCR is configured with KserveV2OcrOp
Docling's HTML backend forwards operator-configured HTTP headers - bearer tokens, API keys, cookies set via HTMLBackendO
Processing a crafted document with Docling (or the docling-slim distribution) versions 2.45.0 through 2.130.x can exhaus
Information disclosure in Docling (and the docling-slim distribution) versions 2.16.0 through 2.130.x lets an attacker e
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today