Read the docs

Ryandfir

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ryandfir records in CISA KEV

No Ryandfir vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Unfurl 2 records HIGH

Records

2 records

TI-2026-28878 CVE-2026-40035 · GHSA-92wx-pxch-p9px

Unfurl - Werkzeug Debugger Exposure via String Config Parsing

Priority HIGH 81

Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00566 Published 2026-04-08 No fix listed CWE-489
TI-2026-28879 CVE-2026-40036 · GHSA-h5qv-qjv4-pc5m

Unfurl < 2026.04 - Denial of Service via Unbounded zlib Decompression

Priority HIGH 77

Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00517 Published 2026-04-08 Fixed in 2026.04, 20260405 CWE-409
Open these records in search →