obsidianforensics
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| unfurl | 2 | – | Apr 8, 2026 |
Exploited and recent CVEs
- CVE-2026-40036 Unfurl < 2026.04 - Denial of Service via Unbounded zlib Decompression 0.5%
- CVE-2026-40035 Unfurl - Werkzeug Debugger Exposure via String Config Parsing 0.6%