CVE-2026-105747
Description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/mets_gbs_backend.py call tarfile.TarFile.getmembers() before enforcing the max_member_count limit, causing the full archive member list to be allocated before the limit can stop processing. A small gzip-compressed tar archive with a very large number of empty members can therefore consume memory proportional to the declared member count, including during format detection before the allowed_formats restriction is applied. This issue is a residual weakness in the member-count protection added for CVE-2026-44018. This issue is fixed in 2.131.0.
How to fix
- docling docling2.131.0 or later
- docling2.131.0 or later
- docling-slim2.131.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| docling docling | 2.45.0 ≤ v < 2.131.0 | 2.131.0 |
| doclingPyPI | 2.45.0 ≤ v < 2.131.0 | 2.131.0 |
| docling-slimPyPI | 2.92.0 ≤ v < 2.131.0 | 2.131.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.