ryandfir has 2 CVEs on record. The median CVSS is 8.3 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-40035Critical· 9.1Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default62CVE-2026-40036High· 7.5Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service53
ryandfir vulnerabilities
CVEs affecting ryandfir, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-40035Critical· 9.1PoCUnfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default
Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default. The debug configuration value is read as a string and passed directly to app.run(), causing any non-em…
▾ Abyssalryandfir · unfurlEPSS 0.56%via NVD
CVE-2026-40036High· 7.5PoCUnfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service
Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service. Attackers can submit highly compressed payloads via URL parameters to the /json/…
▾ Midnightryandfir · unfurlEPSS 0.51%via NVD