p PatchFirst

CVE-2026-105749

CVE-2026-105749 · Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until 2.131.0, the HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/html_backend.py, docling/backend/jats_backend.py, and docling/backend/boxnote_backend.py, accept the rowspan and colspan attribute values without an upper bound and execute loops or allocate a table grid proportional to the declared span. A very small document can therefore cause sustained CPU use or multi-gigabyte memory allocation, and the document_timeout setting does not interrupt the single backend conversion call. Export through the TableData.grid property can further materialize the oversized grid. This issue is fixed in 2.131.0.

CVSS 6.5 · Medium · EPSS 0.3% · Public exploit · Fix available

Published
Updated

Stack: python

Affected products and versions

  • docling

    Versions
    • >= 2.0.0, < 2.131.0: Affected

    No fix published

  • docling-slim

    Versions
    • >= 2.92.0, < 2.131.0: Affected

    No fix published

  • docling PyPI

    Versions
    • 2.0.0
    • 2.1.0
    • 2.10.0
    • 2.100.0
    • 2.101.0
    • 2.102.0
    • 2.102.1
    • 2.102.2
    • 2.103.0
    • 2.104.0
    • 2.105.0
    • 2.106.0
    • 2.107.0
    • 2.108.0
    • 2.109.0
    • 2.11.0
    • 2.110.0
    • 2.111.0
    • 2.112.0
    • 2.113.0
    • 2.114.0
    • 2.115.0
    • 2.116.0
    • 2.117.0
    • 2.118.0
    • 2.118.1
    • 2.119.0
    • 2.12.0
    • 2.120.1
    • 2.120.2
    • 2.120.3
    • 2.121.0
    • 2.122.0
    • 2.123.0
    • 2.123.1
    • 2.124.0
    • 2.125.0
    • 2.126.0
    • 2.127.0
    • 2.128.0
    • 2.129.0
    • 2.13.0
    • 2.130.0
    • 2.14.0
    • 2.15.0
    • 2.15.1
    • 2.16.0
    • 2.17.0
    • 2.18.0
    • 2.19.0
    • 2.2.0
    • 2.2.1
    • 2.20.0
    • 2.21.0
    • 2.22.0
    • 2.23.0
    • 2.23.1
    • 2.24.0
    • 2.25.0
    • 2.25.1
    • 2.25.2
    • 2.26.0
    • 2.27.0
    • 2.28.0
    • 2.28.1
    • 2.28.2
    • 2.28.3
    • 2.28.4
    • 2.29.0
    • 2.3.0
    • 2.3.1
    • 2.30.0
    • 2.31.0
    • 2.31.1
    • 2.31.2
    • 2.32.0
    • 2.33.0
    • 2.34.0
    • 2.35.0
    • 2.36.0
    • 2.36.1
    • 2.37.0
    • 2.38.0
    • 2.38.1
    • 2.39.0
    • 2.4.0
    • 2.4.1
    • 2.4.2
    • 2.40.0
    • 2.41.0
    • 2.42.0
    • 2.42.1
    • 2.42.2
    • 2.43.0
    • 2.44.0
    • 2.45.0
    • 2.46.0
    • 2.47.0
    • 2.47.1
    • 2.48.0
    • 2.49.0
    • 2.5.0
    • 2.5.1
    • 2.5.2
    • 2.50.0
    • 2.51.0
    • 2.52.0
    • 2.53.0
    • 2.54.0
    • 2.55.0
    • 2.55.1
    • 2.56.0
    • 2.56.1
    • 2.57.0
    • 2.58.0
    • 2.59.0
    • 2.6.0
    • 2.60.0
    • 2.60.1
    • 2.61.0
    • 2.61.1
    • 2.61.2
    • 2.62.0
    • 2.63.0
    • 2.64.0
    • 2.64.1
    • 2.65.0
    • 2.66.0
    • 2.67.0
    • 2.68.0
    • 2.69.0
    • 2.69.1
    • 2.7.0
    • 2.7.1
    • 2.70.0
    • 2.71.0
    • 2.72.0
    • 2.73.0
    • 2.73.1
    • 2.74.0
    • 2.75.0
    • 2.76.0
    • 2.77.0
    • 2.78.0
    • 2.79.0
    • 2.8.0
    • 2.8.1
    • 2.8.2
    • 2.8.3
    • 2.80.0
    • 2.81.0
    • 2.82.0
    • 2.83.0
    • 2.84.0
    • 2.85.0
    • 2.86.0
    • 2.87.0
    • 2.88.0
    • 2.89.0
    • 2.9.0
    • 2.90.0
    • 2.91.0
    • 2.92.0
    • 2.93.0
    • 2.94.0
    • 2.95.0
    • 2.96.0
    • 2.96.1
    • 2.97.0
    • 2.98.0
    • 2.99.0
    Affected ranges
    • ECOSYSTEM: ≥ 2.0.0, < 2.131.0

    Update to 2.131.0

  • docling-slim PyPI

    Versions
    • 2.100.0
    • 2.101.0
    • 2.102.0
    • 2.102.1
    • 2.102.2
    • 2.103.0
    • 2.104.0
    • 2.105.0
    • 2.106.0
    • 2.107.0
    • 2.108.0
    • 2.109.0
    • 2.110.0
    • 2.111.0
    • 2.112.0
    • 2.113.0
    • 2.114.0
    • 2.115.0
    • 2.116.0
    • 2.117.0
    • 2.118.0
    • 2.118.1
    • 2.119.0
    • 2.120.1
    • 2.120.2
    • 2.120.3
    • 2.121.0
    • 2.122.0
    • 2.123.0
    • 2.123.1
    • 2.124.0
    • 2.125.0
    • 2.126.0
    • 2.127.0
    • 2.128.0
    • 2.129.0
    • 2.130.0
    • 2.92.0
    • 2.93.0
    • 2.94.0
    • 2.95.0
    • 2.96.0
    • 2.96.1
    • 2.97.0
    • 2.98.0
    • 2.99.0
    Affected ranges
    • ECOSYSTEM: ≥ 2.92.0, < 2.131.0

    Update to 2.131.0

Original sources

Check your server →