Asymmetric-effort Specifyjs vulnerabilities

• asymmetric-effort specifyjs @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString CVE-2026-50290 Fix available 5.3 MediumJuly 2, 2026
• asymmetric-effort specifyjs @asymmetric-effort/specifyjs: URL parse failure silently allows request CVE-2026-50288 Fix available 8.7 HighJuly 2, 2026