Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/02 6:59 p.m.36 views

@asymmetric-effort/specifyjs: URL parse failure silently allows request

Finding Location: core/src/shared/secure-fetch.ts:42-45 When new URL throws a parse error, the assertSecureUrl function returned without throwing, silently allowing the request to proceed without HTTPS validation. Status Fixed in v0.2.136 — The catch block now throws an error instead of silently...

8.7CVSS5.8AI score0.00276EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder