CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-46455
Critical (9.8). EPSS 0.6% chance of exploitation in the next 30 days. Fixed in unstructured 0.14.3.
unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
- CWE
- CWE-611
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-32r8-54hf-c9p3 | PyPI | unstructured | <0.14.3 | 0.14.3 |
| GO-2024-3315 | Go | github.com/Unstructured-IO/unstructured | all versions | no fix published |
| PYSEC-2026-1993 | PyPI | unstructured | <0.14.3 | 0.14.3 |