Critical SSRF vulnerability in Unstructured-IO/unstructured

According to the GitHub Security Advisory database, a critical Server-Side Request Forgery (SSRF) vulnerability has been identified in Unstructured-IO/unstructured, specifically in version 0.22.26. The issue arises from the `url=` argument in the `partition()`, `partition_html()`, and `partition_md()` functions, which fetch URLs using `requests.get()` without host validation. This allows attackers to exploit the library to access internal HTTP services, loopback admin APIs, and cloud metadata endpoints, reading the response body as `Element` text. The vulnerability affects all releases since version 0.4.7, spanning approximately 219 versions.

Operators should carefully assess any workflows or integrations relying on Unstructured-IO/unstructured, particularly those involving URL ingestion. Since the library is widely used as the URL ingestion layer for frameworks like LangChain, LlamaIndex, and Chainlit, downstream applications may inherit this vulnerability unless mitigated. Before upgrading or applying patches, operators should verify whether their systems are exposed to internal or sensitive endpoints and consider implementing temporary safeguards such as network segmentation or external validation layers to block untrusted URL inputs.