Denial of Service

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Docling: Unsafe XML Entity Expansion in USPTO Patent BackendCVE-2026-44020docling-project · CVSS 7.5 · 0.6% likely

   CWE-776

2. Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)CVE-2026-105747docling-project · CVSS 4.3 · 0.3% likely

   CWE-409

3. Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustionCVE-2026-105749docling-project · CVSS 6.5 · 0.3% likely

   CWE-789

4. Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS BackendCVE-2026-44018docling-project · CVSS 5.5 · 0.2% likely

   CWE-409

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.