https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T01:15:44.953289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-40036 CVE-2026-40036 — Unfurl < 2026.04 - Denial of Service via Unbounded zlib Decompression 2026-10-08T01:15:44.969663+00:00

Affected: obsidianforensics unfurl

Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service. Attackers can submit highly compressed payloads via URL parameters to the /json/visjs endpoint that expand to gigabytes, exhausting server memory and crashing the service.