CVE-2026-104250
1 advisory.
PyPI/unstructured CVE-2026-104250: medium 6.1
unstructured: Stored XSS via unescaped HTML generation
Action: Upgrade unstructured to 0.24.1 or later.
pip install unstructured==0.24.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.24.1 | - |
Fixed versions
| 0.24.1 |
Sources
- osv: GHSA-v5mq-3xhg-98m9
- https://github.com/Unstructured-IO/unstructured/security/advisories/GHSA-v5mq-3xhg-98m9
- https://nvd.nist.gov/vuln/detail/CVE-2026-104250
- https://github.com/Unstructured-IO/unstructured/pull/4394
- https://github.com/Unstructured-IO/unstructured/commit/cda16b3f2170019be9c6ea5635946fb3eaa2d66f
- https://github.com/Unstructured-IO/unstructured
- https://github.com/Unstructured-IO/unstructured/releases/tag/0.24.1
CVE-2026-104250 · published · modified · JSON