CVE-2026-47214

Katalog CVE

CVSS 7.1 · High EPSS 0,37%

Kerentanan External Control of File Name or Path pada docling. Skor CVSS 3.1 7.1 (High) menurut github.com.

Deskripsi (NVD)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.

Rincian

Terbit di NVD

26 Juni 2026

Terakhir diubah

2 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-73: External Control of File Name or Path
CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 29,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/docling-project/docling/security/advisories/GHSA-q29v-xc37-wh5m advisory vendor · mitigasi · patch
• https://github.com/docling-project/docling/releases/tag/v2.94.0 patch