Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

PyPI package

docling-graph

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 5.7PyPIAmendedPublished

    docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler

    CVE-2026-44520 · GHSA-fqph-j6v6-jvgx

    Affected
    • PyPI docling-graph <= 1.5.0
    Fixed in
    1.5.1· Vendor fix available
    Issue
    Impact The URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no IP-level validation. Additionally, requests.head() was called with allowredirects=True, allowing an attacker to redirect requests to internal endpoints via an intermediary URL. An attacker who can control the --source CLI argument or PipelineConfig.source API parameter can trigger Server-Side Request Forgery (SSRF) to reach: - Cloud metadata endpoints (e.g. 169.254.169.254) to steal IAM credentials - Internal services on loopback (127.0.0.1) or private network ranges (10.x, 172.16.x, 192.168.x) This affects deployments where docling-graph processes URLs from untrusted input, such as multi-tenant pipelines or server-side automation. Patches The vulnerability is fixed in v1.5.1. Users should…

    Recommended action: Upgrade to 1.5.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →