CVE-2026-40035 — Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that enables Flask debug mode by default. The debug configuration value is read as a string and passed dire — CVE Database · The Intelligence Room