Machine-written summary
Summary written by Claude Haiku from the source advisory. Not reviewed by a person.
docling-graph versions before 1.5.1 are vulnerable to server-side request forgery in the URL input handler, which makes HTTP requests to user-supplied URLs without checking for private, loopback, or link-local addresses and follows redirects. An attacker who can control the source URL, such as through the --source argument or the PipelineConfig.source parameter, could reach internal services or cloud metadata endpoints and potentially obtain credentials. Upgrade to docling-graph 1.5.1 or later; until then, only pass URLs from trusted internal sources.
Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 5.7 | Medium | 3.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N | CNA (GitHub_M) |
- CISA KEV Not listed.
- EPSS 0.0019, the 8th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
- 31 Oct 2026, 15:01 UTC First seen by agentprime
- 31 Oct 2026, 15:01 UTC Confirmed by OSV
Sources
- GitHub Advisory Database: GHSA-fqph-j6v6-jvgx
- OSV: GHSA-fqph-j6v6-jvgx
- github.com/docling-project/docling-graph/security/advisories/GHSA-fqph-j6v6-jvgx
- nvd.nist.gov/vuln/detail/CVE-2026-44520
- cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html
- github.com/docling-project/docling-graph