CVE-2026-105743 | docling-project docling/docling-slim up to 2.131.x URL Validation image_resource_loader.py validate_url_safety dns rebinding

October 5, 2026 Yanac

A vulnerability classified as problematic was found in docling-project docling and docling-slim up to 2.131.x. The affected element is the function validate_url_safety of the file docling/backend/utils/image_resource_loader.py of the component URL Validation. The manipulation results in reliance on reverse dns resolution.

This vulnerability is identified as CVE-2026-105743. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More