EUVD-2026-63472

unstructured: Server-Side Request Forgery in the URL-based partitioning...

CVE-2026-71428

CVE-2026-71428 is a Server-Side Request Forgery (SSRF) in the unstructured Python library (versions 0.4.7 through 0.24.0 ). The url argument of partition, partition_html, and partition_md is fetched without host validation in unstructured/partition/auto.py, unstructured/partition/html/partition.p...

Important: ecs-init

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...