ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +94 more potentially affected by CVE-2025-64712 via unstructured (>=0.5.2, <=0.18.15)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.1.6, =0.2.2, =0.0.1, =4.0.6 - biorxivist 0.2.1 and more Source cves: CVE-2025-64712 Source advisory: MEND:CVE-2025-64712...

EUVD-2025-206785

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitra...

CVE-2025-64712 Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitra...

CVE-2025-64712

CVE-2025-64712 affects the Unstructured library. Prior to version 0.18.18, a path traversal flaw in the partition_msg function enables writing or overwriting arbitrary files when processing malicious MSG attachments. The issue has been patched in version 0.18.18. Affected scope and impact are des...

CVE-2025-64712 Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitra...

CVE-2025-64712 Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitra...

Unstructured security vulnerabilities

Unstructured is an open-source preprocessing tool for unstructured data developed by Unstructured. Versions of Unstructured prior to 0.18.18 contained a security vulnerability due to a path traversal vulnerability in the partitionmsg function. This vulnerability could allow arbitrary files to be...

CVE-2025-64712: Improper Limitation of a Pathname to a Restricted Directory

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitra...

ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +94 more potentially affected by CVE-2025-64712 via unstructured (>=0.5.2, <=0.18.15)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.1.6, =0.2.2, =0.0.1, =4.0.6 - biorxivist 0.2.1 and more Source cves: CVE-2025-64712 Source advisory: OSV:GHSA-GM8Q-M8MV-JJ5M...

ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +94 more potentially affected by CVE-2025-64712 via unstructured (>=0.5.2, <=0.18.15)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.1.6, =0.2.2, =0.0.1, =4.0.6 - biorxivist 0.2.1 and more Source cves: CVE-2025-64712 Source advisory: GHSA-GM8Q-M8MV-JJ5M...

PT-2026-5943

Name of the Vulnerable Software and Affected Versions Unstructured versions prior to 0.18.18 Description The Unstructured library, used for ingesting and pre-processing various document types like PDFs, HTML, Word documents, and images, contains a path traversal vulnerability in the partition msg...

Semantic-Aware Advanced Persistent Threat Detection Using Autoencoders on LLM-Encoded System Logs

Advanced Persistent Threats APTs are among the most challenging cyberattacks to detect. They are carried out by highly skilled attackers who carefully study their targets and operate in a stealthy, long-term manner. Because APTs exhibit "low-and-slow" behavior, traditional statistical methods and...

Directory Traversal

Overview unstructured is an A library that prepares raw documents for downstream ML tasks. Affected versions of this package are vulnerable to Directory Traversal via the partitionmsg function’s handling of attachment filenames in email MSG files. An attacker can exploit this vulnerability by...

ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +94 more potentially affected by CVE-2025-64712 via unstructured (>=0.5.2, <=0.18.15)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.1.6, =0.2.2, =0.0.1, =4.0.6 - biorxivist 0.2.1 and more Source cves: CVE-2025-64712 Source advisory: SNYK:PYTHON-UNSTRUCTURED-14157218...

CVE-2025-65236

OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occontrolpanel/index.php endpoint...

CVE-2025-65235

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function...

CTIArena: Benchmarking LLM Knowledge and Reasoning across Heterogeneous Cyber Threat Intelligence

Cyber threat intelligence CTI is central to modern cybersecurity, providing critical insights for detecting and mitigating evolving threats. With the natural language understanding and reasoning capabilities of large language models LLMs, there is increasing interest in applying them to CTI, whic...

Qt security vulnerabilities

Qt is a cross-platform application development framework from the Qt open source. A security vulnerability exists in Qt that stems from the fact that parsing schema nodes that are children of unstructured nodes may lead to reuse after release...

Dell PowerScale OneFS information leakage vulnerability

DELL PowerScale OneFS is a horizontally scalable NAS Network Attached Storage operating system from Dell Technologies that is primarily used to manage massive amounts of unstructured data. An information disclosure vulnerability exists in DELL PowerScale OneFS that originates from unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2021-25743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the...