Skip to content

[GHSA-9f4q-q82q-4359] Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks - #9914

Open
chrikrah wants to merge 1 commit into
github:chrikrah/advisory-improvement-9914from
chrikrah:chrikrah-GHSA-9f4q-q82q-4359
Open

[GHSA-9f4q-q82q-4359] Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks#9914
chrikrah wants to merge 1 commit into
github:chrikrah/advisory-improvement-9914from
chrikrah:chrikrah-GHSA-9f4q-q82q-4359

[GHSA-9f4q-q82q-4359] docling METS GBS backend is fixed in 2.91.0

7e5d3f7
Select commit
Loading
Failed to load commit list.
Advisory Database / Processing advisory improvement succeeded Oct 1, 2026 in 1s

Processed advisory improvement

Thank you for contributing to GitHub's Advisory Database. Our Security Lab team will review your suggested advisory improvement for publication.

View more details on Advisory Database