[CVE-2026-47214] Docling simplifies document processing by parsing diverse formats and providing integrations with th…

Descripción técnica

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.

Puntuación CVSS

Score: 7.1/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

Productos afectados

Docling — Docling

Debilidades (CWE)

CWE-73, CWE-400

Fuente oficial

Publicado en NIST NVD.