obsidianforensics unfurl

• CVE-2026-40036 High 7.5 Unfurl < 2026.04 - Denial of Service via Unbounded zlib Decompression 0.5%
• CVE-2026-40035 Critical 9.1 Unfurl - Werkzeug Debugger Exposure via String Config Parsing 0.6%