PkgSeer

Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
docling-slim Docling: Configured HTTP headers sent to every remote image host named by a document Low Risk 3.7 7 hours ago 3 hours ago
docling-slim Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine High Risk 7.5 7 hours ago 3 hours ago
docling-slim Docling imports plugin entry points before the allow_external_plugins check Medium Risk 6.7 7 hours ago 3 hours ago
docling-slim Docling: Crafted DoclingDocument JSON embeds local image files into converted output Medium Risk 4.3 7 hours ago 3 hours ago
docling-slim Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion Medium Risk 6.5 7 hours ago 3 hours ago
docling-slim Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection) Medium Risk 4.3 7 hours ago 3 hours ago
docling-slim Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode Medium Risk 5.9 7 hours ago 3 hours ago
docling-slim Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode Medium Risk 5.9 9 days ago 7 days ago
docling-slim Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode) Medium Risk 4.0 7 days ago 7 days ago
docling-slim Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection) Medium Risk 4.3 9 days ago 7 days ago
docling-slim Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion Medium Risk 6.5 7 days ago 7 days ago
docling-slim Docling: Configured HTTP headers sent to every remote image host named by a document Low Risk 3.7 7 days ago 7 days ago
docling-slim Docling imports plugin entry points before the allow_external_plugins check Medium Risk 6.7 7 days ago 7 days ago
docling-slim Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine High Risk 7.5 7 days ago 7 days ago
docling-slim Docling: Crafted DoclingDocument JSON embeds local image files into converted output Medium Risk 4.3 7 days ago 7 days ago
Data courtesy of OSV.dev
Page 1