What’s Vulnerable › Products

asymmetric-effort specifyjs vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your asymmetric-effort specifyjs version is affected

Latest asymmetric-effort specifyjs vulnerabilities

• CVE-2026-50290 — @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString (CVSS 5.3)
• CVE-2026-50288 — @asymmetric-effort/specifyjs: URL parse failure silently allows request (CVSS 8.7)