docTR vulnerabilities

CVEs whose affected-version data names the docTR package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112304High· 7.5

yesterday

docTR through 1.1.0 Unsafe Deserialization RCE via load_pretrained_params()

docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True. Attackers who control a local or URL-supplied checkpoint can embed a malic…

▾ TwilightMindee · docTRvia CVEORG