MEDIUMnpm
GHSA-2944-57xv-2682@asymmetric-effort/specifyjs: `data:` URI allowed without size restriction
Modified: 9/10/2026
package
npm/@asymmetric-effort/specifyjs
pkg:npm/%40asymmetric-effort/specifyjs
MEDIUMnpm
GHSA-5c7w-4wm3-85vw@asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection
Modified: 9/10/2026
HIGHnpm
GHSA-8882-frvv-92w4· CVE-2026-50288@asymmetric-effort/specifyjs: URL parse failure silently allows request
Modified: 9/10/2026
MEDIUMnpm
GHSA-93q6-wwjh-jc6h· CVE-2026-50290@asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString
Modified: 9/10/2026
MEDIUMnpm
GHSA-j5qp-p44g-2m49@asymmetric-effort/specifyjs: No redirect target validation in secureFetch
Modified: 9/10/2026
MEDIUMnpm
GHSA-qcr8-x557-7cp3@asymmetric-effort/specifyjs: Production console warnings may leak internal framework state
Modified: 9/10/2026
MEDIUMnpm
GHSA-xw57-23p8-9wc5@asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range)
Modified: 9/10/2026