asymmetric-effort
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| specifyjs | 2 | – | Aug 21, 2026 |
Exploited and recent CVEs
- CVE-2026-50290 @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString 0.5%
- CVE-2026-50288 @asymmetric-effort/specifyjs: URL parse failure silently allows request 0.5%