PyPI/unstructured CVE-2024-46455: critical 9.8, EPSS 0.57%

unstructured XML External Entity (XXE)

Action: Upgrade unstructured to 0.14.3 or later.

pip install unstructured==0.14.3

Affected

Fixed versions

Sources

• osv: GHSA-32r8-54hf-c9p3
• nvd: CVE-2024-46455
• https://github.com/Unstructured-IO/unstructured/pull/3088
• https://github.com/Unstructured-IO/unstructured/commit/171b5df09fc3346aba8ce91c04de5b3e094a86bd
• https://binarysouljour.me/cve-2024-46455
• https://github.com/Unstructured-IO/unstructured
• https://www.tenable.com/cve/CVE-2024-46455

CVE-2024-46455 · published 2024-12-09T21:31:02Z · modified 2026-07-07T17:56:53.006447840Z · JSON