Skip to content
OpenAdvisories

Package · PyPI

unstructured

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.1
    CVE-2026-104250

    unstructured: Stored XSS via unescaped HTML generation

    The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partition_html(html_parser_version="v2") and the VLM partitioner can preserve u…

    Unstructured-IO unstructured open-webui unstructured Wolfi PyPI
  • Critical 9.3
    CVE-2026-71428

    unstructured: Server-Side Request Forgery in the URL-based partitioning

    The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 until 0.24.0, the url argument of partition, partition_html, and partition_md is fetc…

    Unstructured-IO unstructured open-webui unstructured Wolfi PyPI
  • Critical 9.8
    CVE-2025-64712

    Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

    The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partition_msg function allows an…

    Unstructured-IO unstructured unstructured PyPI
  • Critical 9.8
    CVE-2024-46455

    unstructured XML External Entity (XXE)

    unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser.

    unstructured github.com/Unstructured-IO/unstructured PyPI Go