Obsidian Forensics Unfurl is vulnerable to a denial of service attack via maliciously crafted URL parameters that cause uncontrolled memory consumption.

This vulnerability involves improper handling of highly compressed data within the parse_compressed.py file, which lacks resource limits for zlib decompression. An unauthenticated attacker can submit specially crafted payloads to the /json/visjs endpoint to trigger excessive memory allocation and crash the service.

Successful exploitation of this vulnerability results in an immediate denial of service, rendering the Unfurl application unavailable to all users. Given the critical nature of forensic tools in incident response workflows, this disruption could impede security operations and delay essential investigations. With a CVSS score of 7.5, the risk is classified as High due to the ease of remote, unauthenticated exploitation.

Immediate Action: Update the Unfurl package to version 20260405 or later to implement the necessary decompression limits.

Proactive Monitoring: Monitor server memory utilization and review web server access logs for anomalous, high-frequency requests directed at the /json/visjs endpoint.

Compensating Controls: Implement a Web Application Firewall (WAF) or an API gateway to inspect and filter incoming requests, specifically blocking payloads that exhibit signs of extreme compression ratios or suspicious URL parameter lengths.

Public Exploit Available: Unknown.

The severity of this vulnerability is elevated by its potential to completely halt service availability through a simple, unauthenticated request. Administrators should prioritize updating to the patched version 20260405 immediately to remove the underlying resource allocation flaw and prevent service disruption.