Vulnerability Details CVE-2026-105747
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/mets_gbs_backend.py call tarfile.TarFile.getmembers() before enforcing the max_member_count limit, causing the full archive member list to be allocated before the limit can stop processing. A small gzip-compressed tar archive with a very large number of empty members can therefore consume memory proportional to the declared member count, including during format detection before the allowed_formats restriction is applied. This issue is a residual weakness in the member-count protection added for CVE-2026-44018. This issue is fixed in 2.131.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.1%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2026-105747
-
cpe:2.3:a:docling:docling:2.108.0
-
cpe:2.3:a:docling:docling:2.109.0
-
cpe:2.3:a:docling:docling:2.110.0
-
cpe:2.3:a:docling:docling:2.111.0
-
cpe:2.3:a:docling:docling:2.112.0
-
cpe:2.3:a:docling:docling:2.113.0
-
cpe:2.3:a:docling:docling:2.114.0
-
cpe:2.3:a:docling:docling:2.115.0
-
cpe:2.3:a:docling:docling:2.116.0
-
cpe:2.3:a:docling:docling:2.117.0
-
cpe:2.3:a:docling:docling:2.118.0
-
cpe:2.3:a:docling:docling:2.118.1
-
cpe:2.3:a:docling:docling:2.119.0
-
cpe:2.3:a:docling:docling:2.120.0
-
cpe:2.3:a:docling:docling:2.120.1
-
cpe:2.3:a:docling:docling:2.120.2
-
cpe:2.3:a:docling:docling:2.120.3
-
cpe:2.3:a:docling:docling:2.121.0
-
cpe:2.3:a:docling:docling:2.122.0
-
cpe:2.3:a:docling:docling:2.123.0
-
cpe:2.3:a:docling:docling:2.123.1
-
cpe:2.3:a:docling:docling:2.124.0
-
cpe:2.3:a:docling:docling:2.125.0
-
cpe:2.3:a:docling:docling:2.126.0
-
cpe:2.3:a:docling:docling:2.127.0
-
cpe:2.3:a:docling:docling:2.128.0
-
cpe:2.3:a:docling:docling:2.129.0
-
cpe:2.3:a:docling:docling:2.130.0