CVE-2026-54442

Emissary is a P2P based data-driven workflow engine. Prior to 8.51.0, the VALIDLINK validation in src/main/java/emissary/server/mvc/NavAction.java accepts protocol-relative URLs when processing configured navigation links. Browser URL normalization can interpret these accepted strings as external...