CVE-2026-105745: Docling imports plugin entry points before the allow_external_plugins check
allow_external_plugins=False (the default, and the CLI default) is meant to restrict docling to its own model plugins. However, docling’s plugin factories call pluggy’s load_setuptools_entrypoints(), which imports every module registered under docling’s plugin entry-point group. Only afterwards does docling filter out modules outside the docling. namespace. Import-time code in any installed third-party plugin therefore runs even though external plugins are disabled.
References
- github.com/advisories/GHSA-9jxx-vjrv-h2rq
- github.com/docling-project/docling/commit/0f443b3786e98688a2da3b7c8f56fe5e46af876c
- github.com/docling-project/docling/pull/4413
- github.com/docling-project/docling/releases/tag/v2.131.0
- github.com/docling-project/docling/security/advisories/GHSA-9jxx-vjrv-h2rq
- nvd.nist.gov/vuln/detail/CVE-2026-105745
Code Behaviors & Features
Detect and mitigate CVE-2026-105745 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →