What’s Vulnerable › Vulnerabilities

CVE-2024-46455

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-09 · updated 2026-06-17
• Weakness: CWE-611

Description

unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser.

References

• https://binarysouljour.me/cve-2024-46455
• https://github.com/Unstructured-IO/unstructured/tree/0.14.2

Get alerted when CVE-2024-46455 or the next vulnerability affects your stack