https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 16:01:18 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-104250 <p>The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partition_html(html_parser_version=&#34;v2&#34;) and the VLM partitioner can preserve untrusted document tags, attributes, text, and link targets in metadata.text_as_html, while elements_to_html() emits the result as an HTML document. The to_html() path in unstructured/documents/ontology.py does not escape output or reject unsafe URL schemes, allowing event-handler attributes, attribute breakout markup, and javascript: links to survive parsing. When the generated HTML or text_as_html is rendered in a browser, attacker-controlled script can execute in the viewer&#39;s origin, including in document-ingestion workflows where a privileged reviewer opens submitted content. This issue is fixed in version 0.24.1.</p> <p>The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partition_html(html_parser_version=&#34;v2&#34;) and the VLM partitioner can preserve untrusted document tags, attributes, text, and link targets in metadata.text_as_html, while elements_to_html() emits the result as an HTML document. The to_html() path in unstructured/documents/ontology.py does not escape output or reject unsafe URL schemes, allowing event-handler attributes, attribute breakout markup, and javascript: links to survive parsing. When the generated HTML or text_as_html is rendered in a browser, attacker-controlled script can execute in the viewer&#39;s origin, including in document-ingestion workflows where a privileged reviewer opens submitted content. This issue is fixed in version 0.24.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-104250 https://db.gcve.eu/vuln/ghsa-v5mq-3xhg-98m9 <p><strong>Affected:</strong> PyPI: unstructured</p> <p>### Summary</p> <p>When `unstructured` parses an untrusted document and outputs the result as HTML, malicious markup contained in the document (e.g. `&lt;img src=x onerror=...&gt;`) is left in the output HTML without escaping. When that output is displayed in a browser, the script embedded in the document executes in the viewer&#39;s browser.</p> <p>### Details</p> <p>`partition_html(html_parser_version=&#34;v2&#34;)` (and the VLM partitioner) preserve the input document&#39;s element tags, attributes, and text into `metadata.text_as_html`, and `elements_to_html()` outputs that as an HTML document.</p> <p>The function that builds HTML on this path, `to_html()` in `unstructured/documents/ontology.py`, performs no escaping at all. As a result, event handlers such as `onerror` / `onmouseover` / `onload` originating from the input document are left in the output HTML as-is (literal `&lt;script&gt;` tags are stripped by the parser, but attribute-based vectors and `javascript:` URLs are not). In addition, link URLs are not scheme-filtered, so `&lt;a href=&#34;javascript:...&#34;&gt;` is also emitted.</p> <p>Relevant source: `documents/ontology.py` (`to_html`, `_construct_attribute_string`, `_generate_final_html`); `partition/html/transformations.py` (`text_as_html = ontology_element.to_html()`); `partition/html/convert.py` (`elements_to_html`).</p> <p>### PoC</p> <p>Environment: `downloads.unstructured.io/unstructured-io/unstructured:latest`, `unstructured` 0.23.3.</p> <p>```python from unstructured.partition.html import partition_html from unstructured.partition.html.…</p> <p><strong>Affected:</strong> PyPI: unstructured</p> <p>### Summary</p> <p>When `unstructured` parses an untrusted document and outputs the result as HTML, malicious markup contained in the document (e.g. `&lt;img src=x onerror=...&gt;`) is left in the output HTML without escaping. When that output is displayed in a browser, the script embedded in the document executes in the viewer&#39;s browser.</p> <p>### Details</p> <p>`partition_html(html_parser_version=&#34;v2&#34;)` (and the VLM partitioner) preserve the input document&#39;s element tags, attributes, and text into `metadata.text_as_html`, and `elements_to_html()` outputs that as an HTML document.</p> <p>The function that builds HTML on this path, `to_html()` in `unstructured/documents/ontology.py`, performs no escaping at all. As a result, event handlers such as `onerror` / `onmouseover` / `onload` originating from the input document are left in the output HTML as-is (literal `&lt;script&gt;` tags are stripped by the parser, but attribute-based vectors and `javascript:` URLs are not). In addition, link URLs are not scheme-filtered, so `&lt;a href=&#34;javascript:...&#34;&gt;` is also emitted.</p> <p>Relevant source: `documents/ontology.py` (`to_html`, `_construct_attribute_string`, `_generate_final_html`); `partition/html/transformations.py` (`text_as_html = ontology_element.to_html()`); `partition/html/convert.py` (`elements_to_html`).</p> <p>### PoC</p> <p>Environment: `downloads.unstructured.io/unstructured-io/unstructured:latest`, `unstructured` 0.23.3.</p> <p>```python from unstructured.partition.html import partition_html from unstructured.partition.html.…</p> https://db.gcve.eu/vuln/ghsa-v5mq-3xhg-98m9