unstructured vulnerabilities

2 known vulnerabilities in unstructured from Unstructured-IO. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  unstructured: URL Redirection to Untrusted Site

  CVE-2026-71428Aug 20, 2026Unstructured-IO

  The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 until 0.24.0, the url argument of partition, partition_html, and partition_md is fetch

• 9.8 Critical severity

  unstructured: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-64712Feb 4, 2026Unstructured-IO

  The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partition_msg function allows an