CVE-2026-105747 | docling-project docling/docling-slim up to 2.130.x METS-GBS Format Detection document.py tarfile.TarFile.getmembers allocation of resources

October 5, 2026 Yanac

A vulnerability labeled as problematic has been found in docling-project docling and docling-slim up to 2.130.x. Impacted is the function tarfile.TarFile.getmembers of the file docling/datamodel/document.py of the component METS-GBS Format Detection. Executing a manipulation can lead to allocation of resources.

This vulnerability is handled as CVE-2026-105747. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More