CVE-2026-50288
1 advisory.
npm/@asymmetric-effort/specifyjs CVE-2026-50288: high
@asymmetric-effort/specifyjs: URL parse failure silently allows request
Action: Upgrade @asymmetric-effort/specifyjs to 0.2.136 or later.
npm i @asymmetric-effort/specifyjs@0.2.136Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.136 | - |
Fixed versions
| 0.2.136 |
Sources
- osv: GHSA-8882-frvv-92w4
- https://github.com/asymmetric-effort/specifyjs/security/advisories/GHSA-8882-frvv-92w4
- https://github.com/asymmetric-effort/specifyjs/commit/25d1fb491d99479efdf501f5f75e0bb80c908f0a
- https://github.com/asymmetric-effort/specifyjs
- https://github.com/asymmetric-effort/specifyjs/releases/tag/v0.2.136
CVE-2026-50288 · published · modified · JSON