@asymmetric-effort/specifyjs: URL parse failure silently allows request

Finding Location: core/src/shared/secure-fetch.ts:42-45 When new URL throws a parse error, the assertSecureUrl function returned without throwing, silently allowing the request to proceed without HTTPS validation. Status Fixed in v0.2.136 — The catch block now throws an error instead of silently...

EProsima Fast Dds Security Vulnerability

EProsima Fast Dds is a standalone Cpp middleware implementation from EProsima, Spain. It is used to provide Omg Dds 1.4 and Omg Rtps 2.2 interoperable wired protocol standards. A security vulnerability exists in EProsima Fast DDS 2.11.1 and earlier versions, which stems from allowing an attacker ...