Every CVE whose affected-product data names Ryandfir Unfurl, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2026-40035 — CVSS 9.1 (critical): Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default. The…
CVE-2026-40036 — CVSS 7.5 (high): Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause…