← All advisories

Critical severity9.8GHSA Advisory· Published Dec 9, 2024· Updated Apr 15, 2026

CVE-2024-46455

CVE-2024-46455

Description

unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
unstructuredPyPI	< 0.14.3	0.14.3

Affected products

3

Unstructured Io/UnstructuredGHSA
Range: < 0.14.3
ghsa-coords2 versions
pkg:pypi/unstructured pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 0.14.3+ 1 more
- (no CPE)range: < 0.14.3
- (no CPE)range: < 0.0.20241213T205935-1.1

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-32r8-54hf-c9p3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-46455ghsaADVISORY
binarysouljour.me/cve-2024-46455nvdWEB
github.com/Unstructured-IO/unstructured/commit/171b5df09fc3346aba8ce91c04de5b3e094a86bdghsaWEB
github.com/Unstructured-IO/unstructured/pull/3088ghsaWEB
www.tenable.com/cve/CVE-2024-46455ghsaWEB
github.com/Unstructured-IO/unstructured/tree/0.14.2nvd

News mentions

0

No linked articles in our index yet.