The Securly Chrome Extension version 3.0.7 downloads sensitive JSON data related to crisis alert keywords and filtering rules via unencrypted HTTP using the Fetch API. This cleartext transmission of sensitive information constitutes a CWE-319 vulnerability. While other extension endpoints use HTTPS correctly, this inconsistency exposes sensitive data to potential interception or tampering during transit. No official remediation or patch is currently documented, and no known exploits are reported in the wild.

Sensitive information such as crisis alert keywords and filtering rules is transmitted without encryption, which could allow an attacker with network access to intercept or modify this data. This compromises confidentiality and integrity of the transmitted information. However, the vulnerability does not affect availability and requires network-level access to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious about network environments where the extension is used, especially untrusted networks. Monitoring the vendor advisory at https://kb.cert.org/vuls/id/595768 is recommended for updates on remediation.