GitHub Advisoryadvisory · PyPI

GHSA-cr42-rg2m-mq4q Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

HIGH Published 2026-05-11 Modified 2026-05-18 Official page ↗
Aliases
CVE-2026-31247
Ecosystem
PyPI
Packages
docling
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2026-05-18

Affected packages

• PyPI docling: <= 2.61.0 (no fix yet)

Description

Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend uses etree.parse() to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload (XML Bomb). When processed by Docling, the exponential expansion of entities leads to excessive resource consumption, resulting in a denial of service (DoS) condition on the system running the Docling parser.

Related

Alias · CVE (1)

  • CVE-2026-31247 Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References