Nixpkgs security tracker

Permalink CVE-2026-44018

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 month ago Activity log

Created suggestion 1 month ago

Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0.

References

https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv x_refsource_CONFIRM
https://github.com/docling-project/docling/releases/tag/v2.91.0 x_refsource_MISC

Affected products

docling

==>= 2.45.0, < 2.91.0

Matching in nixpkgs

pkgs.python312Packages.docling-core

None

pkgs.python313Packages.docling-core

Python library to define and validate data types in Docling

nixos-unstable 2.73.0
- nixpkgs-unstable 2.73.0
- nixos-unstable-small 2.73.0
nixos-26.05 2.73.0
- nixos-26.05-small 2.73.0
- nixpkgs-26.05-darwin 2.73.0

pkgs.python314Packages.docling-core

Python library to define and validate data types in Docling

nixos-unstable 2.73.0
- nixpkgs-unstable 2.73.0
- nixos-unstable-small 2.73.0
nixos-26.05 2.73.0
- nixos-26.05-small 2.73.0
- nixpkgs-26.05-darwin 2.73.0

pkgs.python312Packages.docling-ibm-models

None

pkgs.python313Packages.docling-ibm-models

Docling IBM models

nixos-unstable 3.13.2
- nixpkgs-unstable 3.13.2
- nixos-unstable-small 3.13.2
nixos-26.05 3.13.2
- nixos-26.05-small 3.13.2
- nixpkgs-26.05-darwin 3.13.2

pkgs.python314Packages.docling-ibm-models

Docling IBM models

nixos-unstable 3.13.2
- nixpkgs-unstable 3.13.2
- nixos-unstable-small 3.13.2
nixos-26.05 3.13.2
- nixos-26.05-small 3.13.2
- nixpkgs-26.05-darwin 3.13.2

pkgs.pkgsRocm.python3Packages.docling-core

Python library to define and validate data types in Docling

nixos-unstable 2.73.0
- nixpkgs-unstable 2.73.0
- nixos-unstable-small 2.73.0
nixos-26.05 2.73.0
- nixos-26.05-small 2.73.0
- nixpkgs-26.05-darwin 2.73.0

pkgs.pkgsRocm.python3Packages.docling-ibm-models

Docling IBM models

nixos-unstable 3.13.2
- nixpkgs-unstable 3.13.2
- nixos-unstable-small 3.13.2
nixos-26.05 3.13.2
- nixos-26.05-small 3.13.2
- nixpkgs-26.05-darwin 3.13.2

pkgs.python312Packages.llama-index-node-parser-docling

None

pkgs.python313Packages.llama-index-node-parser-docling

Llama-index node_parser docling integration

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2
nixos-26.05 0.4.2
- nixos-26.05-small 0.4.2
- nixpkgs-26.05-darwin 0.4.2

pkgs.pkgsRocm.python3Packages.llama-index-node-parser-docling

Llama-index node_parser docling integration

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2
nixos-26.05 0.4.2
- nixos-26.05-small 0.4.2
- nixpkgs-26.05-darwin 0.4.2

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Permalink CVE-2026-47214

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

created 1 month ago Activity log

Created suggestion 1 month ago

Docling: Unsafe URI and Path Handling in HTML Backend

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.