62 releases · 1 this month
- test: stop GLOBAL_WORKING_DIR tests from disturbing other xdist workers - chore: restore telemetry by default - fix(security): bound quadratic array-stream decoding in is_pdf_too_complex (SEC-146) - fix: linear-time inline element merging in HTML partitioning (ML-1713) - fix: fallback character-set detection for file-like objects - feat: add partition...
Enhancements - Partition arbitrary JSON and NDJSON: partition_json() and partition_ndjson() now handle any valid JSON/NDJSON payload, not just serialized Unstructured output.
- feat: derive category_depth from heading level in the v2 (ontology) HTML parser - fix(ci): stabilize partition benchmark with a rolling-median baseline - refactor: centralize URL fetching with host validation and default timeouts
- fix: stop decimating embedded text on dense PDF pages - fix: keep extracted text aligned with rotated PDF page images in hi_res - feat: add enrichment origins metadata field
0.21.0 Fixes - Replace NLTK with spaCy to remediate CVE-2025-14009: NLTK's downloader uses zipfile.extractall() without path validation, enabling RCE via malicious packages (CVSS 10.0, no patch available). spaCy models install as pip packages, eliminating the vulnerable downloader entirely.
Releases of Unstructured-IO/unstructured on GitHub.
Releasesby Glyph