The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partition_html(html_parser_version="v2") and the VLM partitioner can preserve untrusted document tags, attributes, text, and link targets in metadata.text_as_html, while elements_to_html() emits the result as an HTML document. The to_html() path in unstructured/documents/ontology.py does not escape output or reject unsafe URL schemes, allowing event-handler attributes, attribute breakout markup, and javascript: links to survive parsing. When the generated HTML or text_as_html is rendered in a browser, attacker-controlled script can execute in the viewer's origin, including in document-ingestion workflows where a privileged reviewer opens submitted content. This issue is fixed in version 0.24.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The unstructured library provides open-source components for ingesting and pre-processing images and text
    documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1,
    partition_html(html_parser_version="v2") and the VLM partitioner can preserve untrusted document tags,
    attributes, text, and link targets in metadata.text_as_html, while elements_to_html() emits the result as
    an HTML document. The to_html() path in unstructured/documents/ontology.py does not escape output or
    reject unsafe URL schemes, allowing event-handler attributes, attribute breakout markup, and javascript:
    links to survive parsing. When the generated HTML or text_as_html is rendered in a browser, attacker-
    controlled script can execute in the viewer's origin, including in document-ingestion workflows where a
    privileged reviewer opens submitted content. This issue is fixed in version 0.24.1. (CVE-2026-104250)

ID	Name	Product	Family	Type	Severity
476233	Chainguard: multiple open-webui packages: security update to 0.12.3-r2	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
476233	Chainguard: multiple open-webui packages: security update to 0.12.3-r2	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
474684	SCA: security update for unstructured (GHSA-v5mq-3xhg-98m9)	Tenable Cloud Security	SCA Checks	Local	medium
474684	SCA: security update for unstructured (GHSA-v5mq-3xhg-98m9)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-104250

medium

Tenable Plugins

medium

medium

medium

medium