{"id":"EUVD-2026-64065","enisaUuid":"05ff1dc8-32cd-30a1-922c-9d4ca42cb8e6","description":"SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when `new URL()` throws a parse error, the `assertSecureUrl` function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block now throws an error instead of silently returning.","datePublished":"Aug 21, 2026, 7:29:45 PM","dateUpdated":"Aug 21, 2026, 7:55:40 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/asymmetric-effort/specifyjs/security/advisories/GHSA-8882-frvv-92w4\nhttps://github.com/asymmetric-effort/specifyjs/commit/25d1fb491d99479efdf501f5f75e0bb80c908f0a\nhttps://github.com/asymmetric-effort/specifyjs/releases/tag/v0.2.136\n","aliases":"CVE-2026-50288\nGHSA-8882-frvv-92w4\n","assigner":"GitHub_M","epss":0.48,"enisaIdProduct":[{"id":"69070d7c-4dac-3e17-af91-ecb793f35b55","product":{"name":"specifyjs","vendor":{"name":"asymmetric-effort"}},"product_version":"\u003c 0.2.136"}],"enisaIdVendor":[{"id":"1f7592e6-cf76-30b3-84d0-a83c5011fb82","vendor":{"name":"asymmetric-effort"}}],"enisaIdVulnerability":[{"id":"3328a442-1a54-3b26-ae1a-a79ec9715429","vulnerability":{"id":"GHSA-8882-frvv-92w4","description":"@asymmetric-effort/specifyjs: URL parse failure silently allows request","datePublished":"Jul 2, 2026, 6:59:33 PM","dateUpdated":"Jul 2, 2026, 6:59:33 PM","baseScore":0.0,"references":"https://github.com/asymmetric-effort/specifyjs/security/advisories/GHSA-8882-frvv-92w4\nhttps://github.com/asymmetric-effort/specifyjs/commit/25d1fb491d99479efdf501f5f75e0bb80c908f0a\nhttps://github.com/asymmetric-effort/specifyjs\nhttps://github.com/asymmetric-effort/specifyjs/releases/tag/v0.2.136\n","enisa_id":"EUVD-2026-64065\n","aliases":"GHSA-8882-frvv-92w4\nCVE-2026-50288\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"e68c6451-b71b-3ff2-9769-a317b06ebb85","vulnerability":{"id":"CVE-2026-50288","description":"SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when `new URL()` throws a parse error, the `assertSecureUrl` function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block now throws an error instead of silently returning.","datePublished":"Aug 21, 2026, 7:29:45 PM","dateUpdated":"Aug 21, 2026, 7:55:40 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/asymmetric-effort/specifyjs/security/advisories/GHSA-8882-frvv-92w4\nhttps://github.com/asymmetric-effort/specifyjs/commit/25d1fb491d99479efdf501f5f75e0bb80c908f0a\nhttps://github.com/asymmetric-effort/specifyjs/releases/tag/v0.2.136\n","enisa_id":"EUVD-2026-64065\n","assigner":"GitHub_M","epss":0.48,"dataProcessed":"Nov 7, 2026, 7:19:19 AM","vulnerabilityProduct":[{"id":"c514e15d-a1ba-3b53-9797-ae24d618be0c","product":{"name":"specifyjs","vendor":{"name":"asymmetric-effort"}},"product_version":"\u003c 0.2.136"}],"vulnerabilityVendor":[{"id":"ca4bba18-bc48-3ea8-9924-42d03ba14579","vendor":{"name":"asymmetric-effort"}}]}}],"enisaIdAdvisory":[]}