Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/02 7:07 p.m.•26 views

@asymmetric-effort/specifyjs: `data:` URI allowed without size restriction

Finding Location: core/src/shared/secure-fetch.ts:33-35 data: URIs were allowed without any restriction. While data: URIs don't make network requests, they can be used for memory exhaustion via very large data URIs. Status Fixed in v0.2.136 — data: URIs are now limited to 1MB. URIs exceeding this...

5.8AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder