CyberSecBulletin

Asymmetric-effort vulnerabilities

We track 1 vulnerability in Asymmetric-effort products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.

1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score

Latest Asymmetric-effort vulnerabilities

  • 8.7 High severity

    specifyjs: Server-Side Request Forgery

    CVE-2026-50288Asymmetric-effort

    SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when `new URL()` throws a parse error, the `assertSecureUrl` function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starti