Skip to content
OpenAdvisories

Product · asymmetric-effort

specifyjs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-50290

    @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString

    SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, CSS value sanitization stripped `expression(` and `url(javascript:` using simple regex, but could be bypassed with CSS unicode escapes (`\65xpression(`), null bytes, or …

    asymmetric-effort specifyjs @asymmetric-effort/specifyjs npm