Skip to content

Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

Critical severity GitHub Reviewed Published Feb 3, 2026 in Unstructured-IO/unstructured • Updated Feb 4, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts