Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000268

sonatype-2026-000268

Unfurl - Improper Handling of Highly Compressed Data (Data Amplification)

Published Jan 30, 2026

https://github.com/advisories/GHSA-h5qv-qjv4-pc5m

CVSS ScoreMedium

6.0

Ecosystem	Package	Version


pypi	dfir-unfurl	20200629
pypi	dfir-unfurl	20200630.2
pypi	dfir-unfurl	20200630.3
pypi	dfir-unfurl	20200630.4
pypi	dfir-unfurl	20200630
pypi	dfir-unfurl	20200702
pypi	dfir-unfurl	20200703
pypi	dfir-unfurl	20200729
pypi	dfir-unfurl	20200812
pypi	dfir-unfurl	20201102
pypi	dfir-unfurl	20210308
pypi	dfir-unfurl	20210309
pypi	dfir-unfurl	20210310
pypi	dfir-unfurl	20210311
pypi	dfir-unfurl	20210615
pypi	dfir-unfurl	20220200
pypi	dfir-unfurl	20221100
pypi	dfir-unfurl	20230900
pypi	dfir-unfurl	20230901
pypi	dfir-unfurl	20240625
pypi	dfir-unfurl	20240626
pypi	dfir-unfurl	20240627
pypi	dfir-unfurl	20241120
pypi	dfir-unfurl	20241121
pypi	dfir-unfurl	20250218
pypi	dfir-unfurl	20250312
pypi	dfir-unfurl	20250810

sonatype-2026-000268 | Components Impacted | Sonatype Guide | Sonatype Guide