Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,077All CVEsplus 19,119 rejected
- 505Last 24 hours2,865 in the last 7 days
- 16,890Last 30 days1,546 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 8 | 11 | 2 | 0 | 21 | 21 |
| Title | ||
|---|---|---|
| CVE-2026-112310 | docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRefdocling-project · docling-core | Medium5.3 |
| CVE-2026-105751 | Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backenddocling-project · docling | Medium6.9 |
| CVE-2026-105750 | Docling: `enable_local_fetch` is not enforced in HTML browser-rendering modedocling-project · docling | Medium5.9 |
| CVE-2026-105749 | Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustiondocling-project · docling | Medium6.5 |
| CVE-2026-105748 | Docling: Crafted DoclingDocument JSON embeds local image files into converted outputdocling-project · docling | Medium4.3 |
| CVE-2026-105747 | Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)docling-project · docling | Medium4.3 |
| CVE-2026-105746 | Docling: KServe v2 OCR engine does not enforce enable_remote_servicesdocling-project · docling | Low2.2 |
| CVE-2026-105745 | Docling: Plugin entry points are imported before the allow_external_plugins checkdocling-project · docling | Medium6.7 |
| CVE-2026-105744 | Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic enginedocling-project · docling | High7.5 |
| CVE-2026-105743 | Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)docling-project · docling | Medium4.0 |
| CVE-2026-105742 | Docling: Configured HTTP headers sent to every remote image host named by a documentdocling-project · docling | Low3.7 |
| CVE-2026-44023 | Docling Core has unsafe remote filename resolutiondocling-project · docling-core | High8.6 |
| CVE-2026-44019 | Docling Core has insufficient validation of image reference URIsdocling-project · docling-core | High8.1 |
| CVE-2026-47214 | Docling: Unsafe URI and Path Handling in HTML Backenddocling-project · docling | High7.1 |
| CVE-2026-44018 | Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backenddocling-project · docling | Medium5.5 |
| CVE-2026-44017 | Docling: Unsafe Zip Extraction in EasyOCR Model Downloaddocling-project · docling | High7.5 |
| CVE-2026-44022 | Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commandsdocling-project · docling | Medium5.5 |
| CVE-2026-44020 | Docling: Unsafe XML Entity Expansion in USPTO Patent Backenddocling-project · docling | High7.5 |
| CVE-2026-44016 | Docling: Unsafe Playwright-based HTML Renderingdocling-project · docling | High8.2 |
| CVE-2026-44520 | Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandlerdocling-project · docling-graph | Medium5.7 |
| CVE-2026-24009 | Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usagedocling-project · docling-core | High8.1 |