Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/02 6:59 p.m.19 views

GHSA-8882-FRVV-92W4 @asymmetric-effort/specifyjs: URL parse failure silently allows request

Finding Location: core/src/shared/secure-fetch.ts:42-45 When new URL throws a parse error, the assertSecureUrl function returned without throwing, silently allowing the request to proceed without HTTPS validation. Status Fixed in v0.2.136 — The catch block now throws an error instead of silently...

8.7CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder