Active Debug Code

Overview dfir-unfurl is an Unfurl takes a URL and expands "unfurls" it into a directed graph Affected versions of this package are vulnerable to Active Debug Code due to improper parsing of the debug configuration value, which is always interpreted as truthy and enables the Werkzeug debugger...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview dfir-unfurl is an Unfurl takes a URL and expands "unfurls" it into a directed graph Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the zlib.decompress function in the compressed data parsing process. An attacker can...

cloudscript (0.0.1), cloudview (0.3.2) +20 more potentially affected by CVE-2026-0994 via protobuf (3.10.0)

protobuf PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cloudscript 0.0.1 - cloudview 0.3.2 - comics-down 0.2.0 - dataclay =1.0.7.dev20200310, =20210310.0.0, =2.3.0rc2, =1.14.0b1, =0.0.1, =5.0.0,...