Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/01/29 3:32 p.m.15 views

Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)

Summary The Unfurl web app enables Flask debug mode even when configuration sets debug = False. The config value is read as a string and passed directly to app.rundebug=..., so any non-empty string evaluates truthy. This leaves the Werkzeug debugger active by default. Details - unfurl/app.py:weba...

6.3AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder