CVE-2026-105749 | docling-project Docling up to 2.130.x Document Backend html_backend.py rowspan/colspan allocation of resources

October 5, 2026 Yanac

A vulnerability marked as problematic has been reported in docling-project Docling up to 2.130.x. The affected element is an unknown function of the file docling/backend/html_backend.py of the component Document Backend. The manipulation of the argument rowspan/colspan leads to allocation of resources.

This vulnerability is uniquely identified as CVE-2026-105749. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More