Server-Side Request Forgery in unstructured: What You Need to Know

Severity

HIGH

Affected component

unstructured (pypi)

Affected versions

< 0.14.3 or >= 0.0.1.dev0, <= 0.0.1.dev0 or >= 0.10.0, <= 0.10.0 or >= 0.10.1, <= 0.10.1 or >= 0.10.10, <= 0.10.10 or >= 0.10.11, <= 0.10.11 or >= 0.10.12, <= 0.10.12 or >= 0.10.13, <= 0.10.13 or >= 0.10.14, <= 0.10.14 or >= 0.10.15, <= 0.10.15 or >= 0.10.16, <= 0.10.16 or >= 0.10.18, <= 0.10.18 or >= 0.10.19, <= 0.10.19 or >= 0.10.19.dev18, <= 0.10.19.dev18 or >= 0.10.2, <= 0.10.2 or >= 0.10.20, <= 0.10.20 or >= 0.10.21, <= 0.10.21 or >= 0.10.22, <= 0.10.22 or >= 0.10.23, <= 0.10.23 or >= 0.10.24, <= 0.10.24 or >= 0.10.25, <= 0.10.25 or >= 0.10.26, <= 0.10.26 or >= 0.10.27, <= 0.10.27 or >= 0.10.28, <= 0.10.28 or >= 0.10.29, <= 0.10.29 or >= 0.10.30, <= 0.10.30 or >= 0.10.4, <= 0.10.4 or >= 0.10.5, <= 0.10.5 or >= 0.10.6, <= 0.10.6 or >= 0.10.7, <= 0.10.7 or >= 0.10.8, <= 0.10.8 or >= 0.10.9, <= 0.10.9 or >= 0.11.0, <= 0.11.0 or >= 0.11.1, <= 0.11.1 or >= 0.11.2, <= 0.11.2 or >= 0.11.4, <= 0.11.4 or >= 0.11.5, <= 0.11.5 or >= 0.11.6, <= 0.11.6 or >= 0.11.7, <= 0.11.7 or >= 0.11.8, <= 0.11.8 or >= 0.12.0, <= 0.12.0 or >= 0.12.2, <= 0.12.2 or >= 0.12.3, <= 0.12.3 or >= 0.12.4, <= 0.12.4 or >= 0.12.5, <= 0.12.5 or >= 0.12.6, <= 0.12.6 or >= 0.13.0, <= 0.13.0 or >= 0.13.1, <= 0.13.1 or >= 0.13.2, <= 0.13.2 or >= 0.13.3, <= 0.13.3 or >= 0.13.4, <= 0.13.4 or >= 0.13.5, <= 0.13.5 or >= 0.13.6, <= 0.13.6 or >= 0.13.7, <= 0.13.7 or >= 0.14.0, <= 0.14.0 or >= 0.14.2, <= 0.14.2 or >= 0.14.2.dev1, <= 0.14.2.dev1 or >= 0.2.0, <= 0.2.0 or >= 0.2.1, <= 0.2.1 or >= 0.2.2, <= 0.2.2 or >= 0.2.3, <= 0.2.3 or >= 0.2.4, <= 0.2.4 or >= 0.2.5, <= 0.2.5 or >= 0.2.6.dev1, <= 0.2.6.dev1 or >= 0.3.0, <= 0.3.0 or >= 0.3.1, <= 0.3.1 or >= 0.3.2, <= 0.3.2 or >= 0.3.3, <= 0.3.3 or >= 0.3.4, <= 0.3.4 or >= 0.3.5, <= 0.3.5 or >= 0.4.0, <= 0.4.0 or >= 0.4.1, <= 0.4.1 or >= 0.4.10, <= 0.4.10 or >= 0.4.11, <= 0.4.11 or >= 0.4.12, <= 0.4.12 or >= 0.4.13, <= 0.4.13 or >= 0.4.14, <= 0.4.14 or >= 0.4.15, <= 0.4.15 or >= 0.4.16, <= 0.4.16 or >= 0.4.2, <= 0.4.2 or >= 0.4.3, <= 0.4.3 or >= 0.4.4, <= 0.4.4 or >= 0.4.6, <= 0.4.6 or >= 0.4.7, <= 0.4.7 or >= 0.4.8, <= 0.4.8 or >= 0.4.9, <= 0.4.9 or >= 0.5.0, <= 0.5.0 or >= 0.5.1, <= 0.5.1 or >= 0.5.10, <= 0.5.10 or >= 0.5.11, <= 0.5.11 or >= 0.5.12, <= 0.5.12 or >= 0.5.13, <= 0.5.13 or >= 0.5.2, <= 0.5.2 or >= 0.5.3, <= 0.5.3 or >= 0.5.4, <= 0.5.4 or >= 0.5.6, <= 0.5.6 or >= 0.5.7, <= 0.5.7 or >= 0.5.8, <= 0.5.8 or >= 0.5.9, <= 0.5.9 or >= 0.6.0, <= 0.6.0 or >= 0.6.1, <= 0.6.1 or >= 0.6.10, <= 0.6.10 or >= 0.6.11, <= 0.6.11 or >= 0.6.2, <= 0.6.2 or >= 0.6.3, <= 0.6.3 or >= 0.6.4, <= 0.6.4 or >= 0.6.5, <= 0.6.5 or >= 0.6.6, <= 0.6.6 or >= 0.6.7, <= 0.6.7 or >= 0.6.8, <= 0.6.8 or >= 0.6.9, <= 0.6.9 or >= 0.7.0, <= 0.7.0 or >= 0.7.1, <= 0.7.1 or >= 0.7.10, <= 0.7.10 or >= 0.7.11, <= 0.7.11 or >= 0.7.12, <= 0.7.12 or >= 0.7.2, <= 0.7.2 or >= 0.7.3, <= 0.7.3 or >= 0.7.4, <= 0.7.4 or >= 0.7.5, <= 0.7.5 or >= 0.7.6, <= 0.7.6 or >= 0.7.7, <= 0.7.7 or >= 0.7.8, <= 0.7.8 or >= 0.7.9, <= 0.7.9 or >= 0.8.0, <= 0.8.0 or >= 0.8.1, <= 0.8.1 or >= 0.8.3, <= 0.8.3 or >= 0.8.4, <= 0.8.4 or >= 0.8.5, <= 0.8.5 or >= 0.8.6, <= 0.8.6 or >= 0.8.7, <= 0.8.7 or >= 0.8.8, <= 0.8.8 or >= 0.9.0, <= 0.9.0 or >= 0.9.1, <= 0.9.1 or >= 0.9.2, <= 0.9.2 or >= 0.9.3, <= 0.9.3 or < 0.18.18 or >= 0.0.1.dev0, <= 0.0.1.dev0 or >= 0.10.0, <= 0.10.0 or >= 0.10.1, <= 0.10.1 or >= 0.10.10, <= 0.10.10 or >= 0.10.11, <= 0.10.11 or >= 0.10.12, <= 0.10.12 or >= 0.10.13, <= 0.10.13 or >= 0.10.14, <= 0.10.14 or >= 0.10.15, <= 0.10.15 or >= 0.10.16, <= 0.10.16 or >= 0.10.18, <= 0.10.18 or >= 0.10.19, <= 0.10.19 or >= 0.10.19.dev18, <= 0.10.19.dev18 or >= 0.10.2, <= 0.10.2 or >= 0.10.20, <= 0.10.20 or >= 0.10.21, <= 0.10.21 or >= 0.10.22, <= 0.10.22 or >= 0.10.23, <= 0.10.23 or >= 0.10.24, <= 0.10.24 or >= 0.10.25, <= 0.10.25 or >= 0.10.26, <= 0.10.26 or >= 0.10.27, <= 0.10.27 or >= 0.10.28, <= 0.10.28 or >= 0.10.29, <= 0.10.29 or >= 0.10.30, <= 0.10.30 or >= 0.10.4, <= 0.10.4 or >= 0.10.5, <= 0.10.5 or >= 0.10.6, <= 0.10.6 or >= 0.10.7, <= 0.10.7 or >= 0.10.8, <= 0.10.8 or >= 0.10.9, <= 0.10.9 or >= 0.11.0, <= 0.11.0 or >= 0.11.1, <= 0.11.1 or >= 0.11.2, <= 0.11.2 or >= 0.11.4, <= 0.11.4 or >= 0.11.5, <= 0.11.5 or >= 0.11.6, <= 0.11.6 or >= 0.11.7, <= 0.11.7 or >= 0.11.8, <= 0.11.8 or >= 0.12.0, <= 0.12.0 or >= 0.12.2, <= 0.12.2 or >= 0.12.3, <= 0.12.3 or >= 0.12.4, <= 0.12.4 or >= 0.12.5, <= 0.12.5 or >= 0.12.6, <= 0.12.6 or >= 0.13.0, <= 0.13.0 or >= 0.13.1, <= 0.13.1 or >= 0.13.2, <= 0.13.2 or >= 0.13.3, <= 0.13.3 or >= 0.13.4, <= 0.13.4 or >= 0.13.5, <= 0.13.5 or >= 0.13.6, <= 0.13.6 or >= 0.13.7, <= 0.13.7 or >= 0.14.0, <= 0.14.0 or >= 0.14.10, <= 0.14.10 or >= 0.14.2, <= 0.14.2 or >= 0.14.2.dev1, <= 0.14.2.dev1 or >= 0.14.3, <= 0.14.3 or >= 0.14.4, <= 0.14.4 or >= 0.14.5, <= 0.14.5 or >= 0.14.6, <= 0.14.6 or >= 0.14.7, <= 0.14.7 or >= 0.14.8, <= 0.14.8 or >= 0.14.9, <= 0.14.9 or >= 0.15.0, <= 0.15.0 or >= 0.15.1, <= 0.15.1 or >= 0.15.10, <= 0.15.10 or >= 0.15.12, <= 0.15.12 or >= 0.15.13, <= 0.15.13 or >= 0.15.14, <= 0.15.14 or >= 0.15.3, <= 0.15.3 or >= 0.15.5, <= 0.15.5 or >= 0.15.6, <= 0.15.6 or >= 0.15.7, <= 0.15.7 or >= 0.15.8, <= 0.15.8 or >= 0.15.9, <= 0.15.9 or >= 0.16.0, <= 0.16.0 or >= 0.16.1, <= 0.16.1 or >= 0.16.10, <= 0.16.10 or >= 0.16.11, <= 0.16.11 or >= 0.16.12, <= 0.16.12 or >= 0.16.13, <= 0.16.13 or >= 0.16.14, <= 0.16.14 or >= 0.16.15, <= 0.16.15 or >= 0.16.16, <= 0.16.16 or >= 0.16.17, <= 0.16.17 or >= 0.16.19, <= 0.16.19 or >= 0.16.2, <= 0.16.2 or >= 0.16.20, <= 0.16.20 or >= 0.16.21, <= 0.16.21 or >= 0.16.22, <= 0.16.22 or >= 0.16.23, <= 0.16.23 or >= 0.16.24, <= 0.16.24 or >= 0.16.25, <= 0.16.25 or >= 0.16.3, <= 0.16.3 or >= 0.16.4, <= 0.16.4 or >= 0.16.5, <= 0.16.5 or >= 0.16.6, <= 0.16.6 or >= 0.16.7, <= 0.16.7 or >= 0.16.8, <= 0.16.8 or >= 0.16.9, <= 0.16.9 or >= 0.17.0, <= 0.17.0 or >= 0.17.2, <= 0.17.2 or >= 0.18.1, <= 0.18.1 or >= 0.18.11, <= 0.18.11 or >= 0.18.13, <= 0.18.13 or >= 0.18.14, <= 0.18.14 or >= 0.18.15, <= 0.18.15 or >= 0.18.2, <= 0.18.2 or >= 0.18.3, <= 0.18.3 or >= 0.18.5, <= 0.18.5 or >= 0.18.6, <= 0.18.6 or >= 0.18.7, <= 0.18.7 or >= 0.18.9, <= 0.18.9 or >= 0.2.0, <= 0.2.0 or >= 0.2.1, <= 0.2.1 or >= 0.2.2, <= 0.2.2 or >= 0.2.3, <= 0.2.3 or >= 0.2.4, <= 0.2.4 or >= 0.2.5, <= 0.2.5 or >= 0.2.6.dev1, <= 0.2.6.dev1 or >= 0.3.0, <= 0.3.0 or >= 0.3.1, <= 0.3.1 or >= 0.3.2, <= 0.3.2 or >= 0.3.3, <= 0.3.3 or >= 0.3.4, <= 0.3.4 or >= 0.3.5, <= 0.3.5 or >= 0.4.0, <= 0.4.0 or >= 0.4.1, <= 0.4.1 or >= 0.4.10, <= 0.4.10 or >= 0.4.11, <= 0.4.11 or >= 0.4.12, <= 0.4.12 or >= 0.4.13, <= 0.4.13 or >= 0.4.14, <= 0.4.14 or >= 0.4.15, <= 0.4.15 or >= 0.4.16, <= 0.4.16 or >= 0.4.2, <= 0.4.2 or >= 0.4.3, <= 0.4.3 or >= 0.4.4, <= 0.4.4 or >= 0.4.6, <= 0.4.6 or >= 0.4.7, <= 0.4.7 or >= 0.4.8, <= 0.4.8 or >= 0.4.9, <= 0.4.9 or >= 0.5.0, <= 0.5.0 or >= 0.5.1, <= 0.5.1 or >= 0.5.10, <= 0.5.10 or >= 0.5.11, <= 0.5.11 or >= 0.5.12, <= 0.5.12 or >= 0.5.13, <= 0.5.13 or >= 0.5.2, <= 0.5.2 or >= 0.5.3, <= 0.5.3 or >= 0.5.4, <= 0.5.4 or >= 0.5.6, <= 0.5.6 or >= 0.5.7, <= 0.5.7 or >= 0.5.8, <= 0.5.8 or >= 0.5.9, <= 0.5.9 or >= 0.6.0, <= 0.6.0 or >= 0.6.1, <= 0.6.1 or >= 0.6.10, <= 0.6.10 or >= 0.6.11, <= 0.6.11 or >= 0.6.2, <= 0.6.2 or >= 0.6.3, <= 0.6.3 or >= 0.6.4, <= 0.6.4 or >= 0.6.5, <= 0.6.5 or >= 0.6.6, <= 0.6.6 or >= 0.6.7, <= 0.6.7 or >= 0.6.8, <= 0.6.8 or >= 0.6.9, <= 0.6.9 or >= 0.7.0, <= 0.7.0 or >= 0.7.1, <= 0.7.1 or >= 0.7.10, <= 0.7.10 or >= 0.7.11, <= 0.7.11 or >= 0.7.12, <= 0.7.12 or >= 0.7.2, <= 0.7.2 or >= 0.7.3, <= 0.7.3 or >= 0.7.4, <= 0.7.4 or >= 0.7.5, <= 0.7.5 or >= 0.7.6, <= 0.7.6 or >= 0.7.7, <= 0.7.7 or >= 0.7.8, <= 0.7.8 or >= 0.7.9, <= 0.7.9 or >= 0.8.0, <= 0.8.0 or >= 0.8.1, <= 0.8.1 or >= 0.8.3, <= 0.8.3 or >= 0.8.4, <= 0.8.4 or >= 0.8.5, <= 0.8.5 or >= 0.8.6, <= 0.8.6 or >= 0.8.7, <= 0.8.7 or >= 0.8.8, <= 0.8.8 or >= 0.9.0, <= 0.9.0 or >= 0.9.1, <= 0.9.1 or >= 0.9.2, <= 0.9.2 or >= 0.9.3, <= 0.9.3 or < 0.14.3 or >= 0.0.1.dev0, <= 0.0.1.dev0 or >= 0.10.0, <= 0.10.0 or >= 0.10.1, <= 0.10.1 or >= 0.10.10, <= 0.10.10 or >= 0.10.11, <= 0.10.11 or >= 0.10.12, <= 0.10.12 or >= 0.10.13, <= 0.10.13 or >= 0.10.14, <= 0.10.14 or >= 0.10.15, <= 0.10.15 or >= 0.10.16, <= 0.10.16 or >= 0.10.18, <= 0.10.18 or >= 0.10.19, <= 0.10.19 or >= 0.10.19.dev18, <= 0.10.19.dev18 or >= 0.10.2, <= 0.10.2 or >= 0.10.20, <= 0.10.20 or >= 0.10.21, <= 0.10.21 or >= 0.10.22, <= 0.10.22 or >= 0.10.23, <= 0.10.23 or >= 0.10.24, <= 0.10.24 or >= 0.10.25, <= 0.10.25 or >= 0.10.26, <= 0.10.26 or >= 0.10.27, <= 0.10.27 or >= 0.10.28, <= 0.10.28 or >= 0.10.29, <= 0.10.29 or >= 0.10.30, <= 0.10.30 or >= 0.10.4, <= 0.10.4 or >= 0.10.5, <= 0.10.5 or >= 0.10.6, <= 0.10.6 or >= 0.10.7, <= 0.10.7 or >= 0.10.8, <= 0.10.8 or >= 0.10.9, <= 0.10.9 or >= 0.11.0, <= 0.11.0 or >= 0.11.1, <= 0.11.1 or >= 0.11.2, <= 0.11.2 or >= 0.11.4, <= 0.11.4 or >= 0.11.5, <= 0.11.5 or >= 0.11.6, <= 0.11.6 or >= 0.11.7, <= 0.11.7 or >= 0.11.8, <= 0.11.8 or >= 0.12.0, <= 0.12.0 or >= 0.12.2, <= 0.12.2 or >= 0.12.3, <= 0.12.3 or >= 0.12.4, <= 0.12.4 or >= 0.12.5, <= 0.12.5 or >= 0.12.6, <= 0.12.6 or >= 0.13.0, <= 0.13.0 or >= 0.13.1, <= 0.13.1 or >= 0.13.2, <= 0.13.2 or >= 0.13.3, <= 0.13.3 or >= 0.13.4, <= 0.13.4 or >= 0.13.5, <= 0.13.5 or >= 0.13.6, <= 0.13.6 or >= 0.13.7, <= 0.13.7 or >= 0.14.0, <= 0.14.0 or >= 0.14.2, <= 0.14.2 or >= 0.14.2.dev1, <= 0.14.2.dev1 or >= 0.2.0, <= 0.2.0 or >= 0.2.1, <= 0.2.1 or >= 0.2.2, <= 0.2.2 or >= 0.2.3, <= 0.2.3 or >= 0.2.4, <= 0.2.4 or >= 0.2.5, <= 0.2.5 or >= 0.2.6.dev1, <= 0.2.6.dev1 or >= 0.3.0, <= 0.3.0 or >= 0.3.1, <= 0.3.1 or >= 0.3.2, <= 0.3.2 or >= 0.3.3, <= 0.3.3 or >= 0.3.4, <= 0.3.4 or >= 0.3.5, <= 0.3.5 or >= 0.4.0, <= 0.4.0 or >= 0.4.1, <= 0.4.1 or >= 0.4.10, <= 0.4.10 or >= 0.4.11, <= 0.4.11 or >= 0.4.12, <= 0.4.12 or >= 0.4.13, <= 0.4.13 or >= 0.4.14, <= 0.4.14 or >= 0.4.15, <= 0.4.15 or >= 0.4.16, <= 0.4.16 or >= 0.4.2, <= 0.4.2 or >= 0.4.3, <= 0.4.3 or >= 0.4.4, <= 0.4.4 or >= 0.4.6, <= 0.4.6 or >= 0.4.7, <= 0.4.7 or >= 0.4.8, <= 0.4.8 or >= 0.4.9, <= 0.4.9 or >= 0.5.0, <= 0.5.0 or >= 0.5.1, <= 0.5.1 or >= 0.5.10, <= 0.5.10 or >= 0.5.11, <= 0.5.11 or >= 0.5.12, <= 0.5.12 or >= 0.5.13, <= 0.5.13 or >= 0.5.2, <= 0.5.2 or >= 0.5.3, <= 0.5.3 or >= 0.5.4, <= 0.5.4 or >= 0.5.6, <= 0.5.6 or >= 0.5.7, <= 0.5.7 or >= 0.5.8, <= 0.5.8 or >= 0.5.9, <= 0.5.9 or >= 0.6.0, <= 0.6.0 or >= 0.6.1, <= 0.6.1 or >= 0.6.10, <= 0.6.10 or >= 0.6.11, <= 0.6.11 or >= 0.6.2, <= 0.6.2 or >= 0.6.3, <= 0.6.3 or >= 0.6.4, <= 0.6.4 or >= 0.6.5, <= 0.6.5 or >= 0.6.6, <= 0.6.6 or >= 0.6.7, <= 0.6.7 or >= 0.6.8, <= 0.6.8 or >= 0.6.9, <= 0.6.9 or >= 0.7.0, <= 0.7.0 or >= 0.7.1, <= 0.7.1 or >= 0.7.10, <= 0.7.10 or >= 0.7.11, <= 0.7.11 or >= 0.7.12, <= 0.7.12 or >= 0.7.2, <= 0.7.2 or >= 0.7.3, <= 0.7.3 or >= 0.7.4, <= 0.7.4 or >= 0.7.5, <= 0.7.5 or >= 0.7.6, <= 0.7.6 or >= 0.7.7, <= 0.7.7 or >= 0.7.8, <= 0.7.8 or >= 0.7.9, <= 0.7.9 or >= 0.8.0, <= 0.8.0 or >= 0.8.1, <= 0.8.1 or >= 0.8.3, <= 0.8.3 or >= 0.8.4, <= 0.8.4 or >= 0.8.5, <= 0.8.5 or >= 0.8.6, <= 0.8.6 or >= 0.8.7, <= 0.8.7 or >= 0.8.8, <= 0.8.8 or >= 0.9.0, <= 0.9.0 or >= 0.9.1, <= 0.9.1 or >= 0.9.2, <= 0.9.2 or >= 0.9.3, <= 0.9.3 or < 0.18.18 or >= 0.0.1.dev0, <= 0.0.1.dev0 or >= 0.10.0, <= 0.10.0 or >= 0.10.1, <= 0.10.1 or >= 0.10.10, <= 0.10.10 or >= 0.10.11, <= 0.10.11 or >= 0.10.12, <= 0.10.12 or >= 0.10.13, <= 0.10.13 or >= 0.10.14, <= 0.10.14 or >= 0.10.15, <= 0.10.15 or >= 0.10.16, <= 0.10.16 or >= 0.10.18, <= 0.10.18 or >= 0.10.19, <= 0.10.19 or >= 0.10.19.dev18, <= 0.10.19.dev18 or >= 0.10.2, <= 0.10.2 or >= 0.10.20, <= 0.10.20 or >= 0.10.21, <= 0.10.21 or >= 0.10.22, <= 0.10.22 or >= 0.10.23, <= 0.10.23 or >= 0.10.24, <= 0.10.24 or >= 0.10.25, <= 0.10.25 or >= 0.10.26, <= 0.10.26 or >= 0.10.27, <= 0.10.27 or >= 0.10.28, <= 0.10.28 or >= 0.10.29, <= 0.10.29 or >= 0.10.30, <= 0.10.30 or >= 0.10.4, <= 0.10.4 or >= 0.10.5, <= 0.10.5 or >= 0.10.6, <= 0.10.6 or >= 0.10.7, <= 0.10.7 or >= 0.10.8, <= 0.10.8 or >= 0.10.9, <= 0.10.9 or >= 0.11.0, <= 0.11.0 or >= 0.11.1, <= 0.11.1 or >= 0.11.2, <= 0.11.2 or >= 0.11.4, <= 0.11.4 or >= 0.11.5, <= 0.11.5 or >= 0.11.6, <= 0.11.6 or >= 0.11.7, <= 0.11.7 or >= 0.11.8, <= 0.11.8 or >= 0.12.0, <= 0.12.0 or >= 0.12.2, <= 0.12.2 or >= 0.12.3, <= 0.12.3 or >= 0.12.4, <= 0.12.4 or >= 0.12.5, <= 0.12.5 or >= 0.12.6, <= 0.12.6 or >= 0.13.0, <= 0.13.0 or >= 0.13.1, <= 0.13.1 or >= 0.13.2, <= 0.13.2 or >= 0.13.3, <= 0.13.3 or >= 0.13.4, <= 0.13.4 or >= 0.13.5, <= 0.13.5 or >= 0.13.6, <= 0.13.6 or >= 0.13.7, <= 0.13.7 or >= 0.14.0, <= 0.14.0 or >= 0.14.10, <= 0.14.10 or >= 0.14.2, <= 0.14.2 or >= 0.14.2.dev1, <= 0.14.2.dev1 or >= 0.14.3, <= 0.14.3 or >= 0.14.4, <= 0.14.4 or >= 0.14.5, <= 0.14.5 or >= 0.14.6, <= 0.14.6 or >= 0.14.7, <= 0.14.7 or >= 0.14.8, <= 0.14.8 or >= 0.14.9, <= 0.14.9 or >= 0.15.0, <= 0.15.0 or >= 0.15.1, <= 0.15.1 or >= 0.15.10, <= 0.15.10 or >= 0.15.12, <= 0.15.12 or >= 0.15.13, <= 0.15.13 or >= 0.15.14, <= 0.15.14 or >= 0.15.3, <= 0.15.3 or >= 0.15.5, <= 0.15.5 or >= 0.15.6, <= 0.15.6 or >= 0.15.7, <= 0.15.7 or >= 0.15.8, <= 0.15.8 or >= 0.15.9, <= 0.15.9 or >= 0.16.0, <= 0.16.0 or >= 0.16.1, <= 0.16.1 or >= 0.16.10, <= 0.16.10 or >= 0.16.11, <= 0.16.11 or >= 0.16.12, <= 0.16.12 or >= 0.16.13, <= 0.16.13 or >= 0.16.14, <= 0.16.14 or >= 0.16.15, <= 0.16.15 or >= 0.16.16, <= 0.16.16 or >= 0.16.17, <= 0.16.17 or >= 0.16.19, <= 0.16.19 or >= 0.16.2, <= 0.16.2 or >= 0.16.20, <= 0.16.20 or >= 0.16.21, <= 0.16.21 or >= 0.16.22, <= 0.16.22 or >= 0.16.23, <= 0.16.23 or >= 0.16.24, <= 0.16.24 or >= 0.16.25, <= 0.16.25 or >= 0.16.3, <= 0.16.3 or >= 0.16.4, <= 0.16.4 or >= 0.16.5, <= 0.16.5 or >= 0.16.6, <= 0.16.6 or >= 0.16.7, <= 0.16.7 or >= 0.16.8, <= 0.16.8 or >= 0.16.9, <= 0.16.9 or >= 0.17.0, <= 0.17.0 or >= 0.17.2, <= 0.17.2 or >= 0.18.1, <= 0.18.1 or >= 0.18.11, <= 0.18.11 or >= 0.18.13, <= 0.18.13 or >= 0.18.14, <= 0.18.14 or >= 0.18.15, <= 0.18.15 or >= 0.18.2, <= 0.18.2 or >= 0.18.3, <= 0.18.3 or >= 0.18.5, <= 0.18.5 or >= 0.18.6, <= 0.18.6 or >= 0.18.7, <= 0.18.7 or >= 0.18.9, <= 0.18.9 or >= 0.2.0, <= 0.2.0 or >= 0.2.1, <= 0.2.1 or >= 0.2.2, <= 0.2.2 or >= 0.2.3, <= 0.2.3 or >= 0.2.4, <= 0.2.4 or >= 0.2.5, <= 0.2.5 or >= 0.2.6.dev1, <= 0.2.6.dev1 or >= 0.3.0, <= 0.3.0 or >= 0.3.1, <= 0.3.1 or >= 0.3.2, <= 0.3.2 or >= 0.3.3, <= 0.3.3 or >= 0.3.4, <= 0.3.4 or >= 0.3.5, <= 0.3.5 or >= 0.4.0, <= 0.4.0 or >= 0.4.1, <= 0.4.1 or >= 0.4.10, <= 0.4.10 or >= 0.4.11, <= 0.4.11 or >= 0.4.12, <= 0.4.12 or >= 0.4.13, <= 0.4.13 or >= 0.4.14, <= 0.4.14 or >= 0.4.15, <= 0.4.15 or >= 0.4.16, <= 0.4.16 or >= 0.4.2, <= 0.4.2 or >= 0.4.3, <= 0.4.3 or >= 0.4.4, <= 0.4.4 or >= 0.4.6, <= 0.4.6 or >= 0.4.7, <= 0.4.7 or >= 0.4.8, <= 0.4.8 or >= 0.4.9, <= 0.4.9 or >= 0.5.0, <= 0.5.0 or >= 0.5.1, <= 0.5.1 or >= 0.5.10, <= 0.5.10 or >= 0.5.11, <= 0.5.11 or >= 0.5.12, <= 0.5.12 or >= 0.5.13, <= 0.5.13 or >= 0.5.2, <= 0.5.2 or >= 0.5.3, <= 0.5.3 or >= 0.5.4, <= 0.5.4 or >= 0.5.6, <= 0.5.6 or >= 0.5.7, <= 0.5.7 or >= 0.5.8, <= 0.5.8 or >= 0.5.9, <= 0.5.9 or >= 0.6.0, <= 0.6.0 or >= 0.6.1, <= 0.6.1 or >= 0.6.10, <= 0.6.10 or >= 0.6.11, <= 0.6.11 or >= 0.6.2, <= 0.6.2 or >= 0.6.3, <= 0.6.3 or >= 0.6.4, <= 0.6.4 or >= 0.6.5, <= 0.6.5 or >= 0.6.6, <= 0.6.6 or >= 0.6.7, <= 0.6.7 or >= 0.6.8, <= 0.6.8 or >= 0.6.9, <= 0.6.9 or >= 0.7.0, <= 0.7.0 or >= 0.7.1, <= 0.7.1 or >= 0.7.10, <= 0.7.10 or >= 0.7.11, <= 0.7.11 or >= 0.7.12, <= 0.7.12 or >= 0.7.2, <= 0.7.2 or >= 0.7.3, <= 0.7.3 or >= 0.7.4, <= 0.7.4 or >= 0.7.5, <= 0.7.5 or >= 0.7.6, <= 0.7.6 or >= 0.7.7, <= 0.7.7 or >= 0.7.8, <= 0.7.8 or >= 0.7.9, <= 0.7.9 or >= 0.8.0, <= 0.8.0 or >= 0.8.1, <= 0.8.1 or >= 0.8.3, <= 0.8.3 or >= 0.8.4, <= 0.8.4 or >= 0.8.5, <= 0.8.5 or >= 0.8.6, <= 0.8.6 or >= 0.8.7, <= 0.8.7 or >= 0.8.8, <= 0.8.8 or >= 0.9.0, <= 0.9.0 or >= 0.9.1, <= 0.9.1 or >= 0.9.2, <= 0.9.2 or >= 0.9.3, <= 0.9.3

Patched version

Not yet available

An early warning has been issued for a high-severity Server-Side Request Forgery (SSRF) vulnerability in the unstructured Python package. This vulnerability could allow attackers to read internal services and metadata.

What happened

The vulnerability lies in the url= argument of partition(), partition_html(), and partition_md() functions in the unstructured package. These functions use requests.get() without host validation, allowing an attacker to specify any URL and read its response body as Element text. This is a full-read SSRF, meaning attackers can reach loopback admin APIs, internal HTTP services, and cloud metadata endpoints.

The vulnerability was first flagged on September 3, 2026. It has not been exploited in the wild as of now. The affected versions are complex and include many versions from 0.0.1.dev0 to 0.18.18, excluding 0.14.3 and above. For the full list of affected versions, consult the primary sources.

What to do about it

• Check your current version of unstructured against the affected versions listed in the threat data.
• If you are using an affected version, upgrade to a version that includes host validation for the url= argument in the mentioned functions.
• Monitor the primary sources for updates on patched versions and further information.
• As no official fix has been published yet, continue to monitor the situation and apply any future patches as soon as they become available.

How 0Day would have caught this

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Sources

• [GHSA-4mvj-m6j5-pmf7] unstructured: Server-Side Request Forgery in the URL-based partitioning
• [GHSA-4mvj-m6j5-pmf7] unstructured: Server-Side Request Forgery in the URL-based partitioning

Join the 0Day waitlist →

← Back to all threats