HIGH7.5PyPI
PYSEC-2026-1294· CVE-2026-40036, GHSA-h5qv-qjv4-pc5mUnfurl's unbounded zlib decompression allows decompression bomb DoS
Modified: 7/7/2026
package
PyPI/dfir-unfurl
pkg:pypi/dfir-unfurl
HIGH7.5PyPI
GHSA-h5qv-qjv4-pc5m· CVE-2026-40036, PYSEC-2026-1294Unfurl's unbounded zlib decompression allows decompression bomb DoS
Modified: 7/7/2026
CRITICALPyPI
GHSA-vg9h-jx4v-cwx2· CVE-2026-40035Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)
Modified: 7/8/2026