CVE-2026-8874

Version 3.0.7 of the Securly Chrome Extension contains an inconsistent implementation of TLS, where it downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. While other endpoints correctly use HTTPS for IWF and CIPA data, this oversight...