01 Record

CVE-2026-50288

@asymmetric-effort/specifyjs: URL parse failure silently allows request

HighPUBLISHEDCNA: GitHub_M

Base score8.7 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

02 Description

@asymmetric-effort/specifyjs: URL parse failure silently allows request

Published

2026-08-21 19:29Z6 HR AGO

Last updated

2026-08-21 19:55Z5 HR AGO

Reserved

2026-06-04

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 8.7)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

ExploitationnoneAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

2165982e2c557d7c825f406f5db39bb3b600a7870d9b9fd8d6075bd723e6a959

VendorProductVersionsPlatforms

asymmetric-effortspecifyjs< 0.2.136—