AIKIDO-2026-57994
unstructured is vulnerable to Server-Side Request Forgery (SSRF)
93
Critical Risk
This Affects:
unstructuredTL;DR
The url= argument of partition(), partition_html(), and partition_md() is fetched with requests.get() without any host or scheme validation. Externally influenced URLs can target loopback services, internal HTTP endpoints, and cloud metadata addresses, and the response body is returned as element text. Redirects are followed without validation, widening the set of reachable internal targets. The fix routes outbound fetches through a shared helper that enforces a scheme allowlist, validates resolved addresses, rejects private and loopback destinations by default, and validates on each redirect hop.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you pass externally influenced URLs to the url= argument of partition(), partition_html(), or partition_md().
Background info
unstructured is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.4.7 - 0.23.1.
How to fix this
Upgrade the unstructured library to the patch version.
Links
GitHub Release
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant