CVE-2024-46455

unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...

[SECURITY] Fedora 42 Update: syslog-ng-4.8.2-1.fc42

syslog-ng is an enhanced log daemon, supporting a wide range of input and output methods: syslog, unstructured text, message queues, databases SQL and NoSQL alike and more. Key features: receive and send RFC3164 and RFC5424 style syslog messages work with any kind of unstructured data receive and...

Veritas Data Insight security vulnerabilities

Veritas Data Insight is a solution from Veritas that classifies, contextualizes, and controls unstructured data. A security vulnerability exists in Veritas Data Insight versions prior to 7.1.2 that stems from the possibility of sending plaintext credentials when configured to use HTTP basic...

Information Exposure

Overview unstructured is an A library that prepares raw documents for downstream ML tasks. Affected versions of this package are vulnerable to Information Exposure when the filetype supports an include functionality, it is possible to partition arbitrary local files. This vulnerability specifical...

ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +84 more potentially affected by unknown CVE via unstructured (>=0.5.2, <=0.16.17)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.1.6, =0.0.1, =0.0.1, =0.2.5 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-UNSTRUCTURED-9055244...

GO-2024-3315 CVE-2024-46455 in github.com/Unstructured-IO/unstructured

CVE-2024-46455 in github.com/Unstructured-IO/unstructured...

unstructured XML External Entity (XXE)

unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...

ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +63 more potentially affected by CVE-2024-46455 via unstructured (>=0.5.2, <=0.14.2)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.2.5 - chatdocs 0.2.6 - clarifai-datautils 0.0.3 and more Source cves: CVE-2024-46455 Source advisory: OSV:GHSA-32R8-54HF-C9P3...

ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +63 more potentially affected by CVE-2024-46455 via unstructured (>=0.5.2, <=0.14.2)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.2.5 - chatdocs 0.2.6 - clarifai-datautils 0.0.3 and more Source cves: CVE-2024-46455 Source advisory: SNYK:PYTHON-UNSTRUCTURED-8492724...

ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +63 more potentially affected by CVE-2024-46455 via unstructured (>=0.5.2, <=0.14.2)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.2.5 - chatdocs 0.2.6 - clarifai-datautils 0.0.3 and more Source cves: CVE-2024-46455 Source advisory: GHSA-32R8-54HF-C9P3...

GHSA-32R8-54HF-C9P3 unstructured XML External Entity (XXE)

unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...

XML External Entity (XXE) Injection

Overview unstructured is an A library that prepares raw documents for downstream ML tasks. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the XMLParser. An attacker can access sensitive data or cause denial of service by supplying malicious XML content...

CVE-2024-46455

unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...

ai-oppose (>=0.0.1, <=0.0.15), airbyte-source-azure-blob-storage (>=0.3.3, <=0.6.12) +63 more potentially affected by CVE-2024-46455 via unstructured (>=0.5.2, <=0.14.2)

unstructured PYPI version =0.5.2, =0.0.1, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.2.5 - chatdocs 0.2.6 - clarifai-datautils 0.0.3 and more Source cves: CVE-2024-46455 Source advisory: MEND:CVE-2024-46455...

PT-2024-31995

Name of the Vulnerable Software and Affected Versions unstructured versions prior to 0.14.2 Description The issue is related to an XML External Entity XXE vulnerability via the XMLParser. This vulnerability affects the unstructured tool. Recommendations For versions prior to 0.14.2, as a temporar...

CVE-2024-46455

unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...

Unstructured security vulnerabilities

Unstructured is an open source preprocessor for unstructured data from Unstructured Open Source. A security vulnerability exists in Unstructured 0.14.2 and earlier versions, which stems from vulnerability to XML External Entity XXE attacks via XMLParser...

CVE-2024-46455

unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...

CVE-2024-46455

unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...

CVE-2024-46455

The unstructured library (versions v.0.14.2 and before ) is vulnerable to an XML External Entity (XXE) injection flaw. The root cause is located within the XMLParser component, which fails to properly handle external entities. This vulnerability allows an attacker to potentially access internal r...