https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T22:02:27.779464+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-50288 CVE-2026-50288 — @asymmetric-effort/specifyjs: URL parse failure silently allows request 2026-10-16T22:02:27.794678+00:00

Affected: asymmetric-effort specifyjs

SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when `new URL()` throws a parse error, the `assertSecureUrl` function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block now throws an error instead of silently returning.