Logo
Retour à la veille

CVE-2026-105747

Publié : 5 octobre 2026
Modifié : 5 octobre 2026
Lien officiel NVD
Score CVSS
4.3
MEDIUM

Description détaillée

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/mets_gbs_backend.py call tarfile.TarFile.getmembers() before enforcing the max_member_count limit, causing the full archive member list to be allocated before the limit can stop processing. A small gzip-compressed tar archive with a very large number of empty members can therefore consume memory proportional to the declared member count, including during format detection before the allowed_formats restriction is applied. This issue is a residual weakness in the member-count protection added for CVE-2026-44018. This issue is fixed in 2.131.0.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Références et Patchs

https://github.com/docling-project/docling/commit/ebae65cd71c37c88b36185b406a449b92d8f7ffahttps://github.com/docling-project/docling/pull/4412https://github.com/docling-project/docling/releases/tag/v2.131.0https://github.com/docling-project/docling/security/advisories/GHSA-3cr3-8m4c-fpxw

Dernières Vulnérabilités

CVE-2026-93321

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.

VOIR DÉTAILS

CVE-2026-93315

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build.

VOIR DÉTAILS

CVE-2026-91107

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path to reset that selected account's password.

VOIR DÉTAILS