Skip to content
OpenAdvisories

Vendor

obsidianforensics

2 known vulnerabilities.

Products

unfurl 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-40036

    Unfurl < 2026.04 - Denial of Service via Unbounded zlib Decompression

    Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service. Attackers can submit highly compressed payloads via URL parameters to the /json/visjs endpoint that ex…

    obsidianforensics unfurl dfir-unfurl PyPI