Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Asymmetric-effort
Asymmetric-effort vulnerabilities
Products
Specifyjs
2
Newest
asymmetric-effort
specifyjs
@asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString
CVE-2026-50290
Fix available
5.3
Medium
July 2, 2026
asymmetric-effort
specifyjs
@asymmetric-effort/specifyjs: URL parse failure silently allows request
CVE-2026-50288
Fix available
8.7
High
July 2, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open