CVE-2026-50288 – @asymmetric-effort/specifyjs: URL parse failure silently allows request
CVE ID :CVE-2026-50288 Published : Aug. 21, 2026, 8:16 p.m. | 29 minutes ago Description :SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when `new URL()` throws a parse error, the `assertSecureUrl` function returned without throwing, silently…
