Obsidianforensics vulnerabilities
We track 2 vulnerabilities in Obsidianforensics products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 8, 2026.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Obsidianforensics vulnerabilities
- 7.5 High severity
unfurl: Improper Handling of Highly Compressed Data (Data Amplification)
Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service. Attackers can submit highly compressed payloads via URL parameters to the /json/visjs endpoint that exp
- 9.1 Critical severity
unfurl: Active Debug Code
Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default. The debug configuration value is read as a string and passed directly to app.run(), causing any non-empty string to evaluate