Unstructured-IO vulnerabilities
We track 2 vulnerabilities in Unstructured-IO products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.
2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score
Latest Unstructured-IO vulnerabilities
- 9.3 Critical severity
unstructured: URL Redirection to Untrusted Site
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 until 0.24.0, the url argument of partition, partition_html, and partition_md is fetch
- 9.8 Critical severity
unstructured: Improper Limitation of a Pathname to a Restricted Directory
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partition_msg function allows an