CVE-2024-46455

PyPI/unstructured CVE-2024-46455: critical 9.8

unstructured XML External Entity (XXE)

Action: Upgrade unstructured to 0.14.3 or later.

pip install unstructured==0.14.3

Affected

Fixed versions

Sources

• osv: GHSA-32r8-54hf-c9p3
• nvd: CVE-2024-46455
• https://github.com/Unstructured-IO/unstructured/pull/3088
• https://github.com/Unstructured-IO/unstructured/commit/171b5df09fc3346aba8ce91c04de5b3e094a86bd
• https://binarysouljour.me/cve-2024-46455
• https://github.com/Unstructured-IO/unstructured
• https://www.tenable.com/cve/CVE-2024-46455

CVE-2024-46455 · published 2024-12-09T21:31:02Z · modified 2026-07-07T17:56:53.006447840Z · JSON

Go/github.com/Unstructured-IO/unstructured CVE-2024-46455: unknown

CVE-2024-46455 in github.com/Unstructured-IO/unstructured

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-3315
• https://nvd.nist.gov/vuln/detail/CVE-2024-46455
• https://binarysouljour.me/cve-2024-46455
• https://github.com/Unstructured-IO/unstructured/tree/0.14.2

CVE-2024-46455 · published 2024-12-10T21:29:10Z · modified 2026-07-07T17:56:53.006447840Z · JSON

PyPI/unstructured CVE-2024-46455: unknown

unstructured XML External Entity (XXE)

Action: Upgrade unstructured to 0.14.3 or later.

pip install unstructured==0.14.3

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1993
• https://nvd.nist.gov/vuln/detail/CVE-2024-46455
• https://github.com/Unstructured-IO/unstructured/pull/3088
• https://github.com/Unstructured-IO/unstructured/commit/171b5df09fc3346aba8ce91c04de5b3e094a86bd
• https://binarysouljour.me/cve-2024-46455
• https://github.com/Unstructured-IO/unstructured
• https://www.tenable.com/cve/CVE-2024-46455
• https://pypi.org/project/unstructured
• https://github.com/advisories/GHSA-32r8-54hf-c9p3

CVE-2024-46455 · published 2026-07-07T14:34:47.039912Z · modified 2026-07-07T17:56:53.006447840Z · JSON