CVE-2026-50288

SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when "new URL" throws a parse error, the "assertSecureUrl" function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block...