CVE-2026-54442 NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRF

Emissary is a P2P based data-driven workflow engine. Prior to 8.51.0, the VALIDLINK validation in src/main/java/emissary/server/mvc/NavAction.java accepts protocol-relative URLs when processing configured navigation links. Browser URL normalization can interpret these accepted strings as external...