CVE-2026-5200: CSS Expression Sanitization Bypass Leading to XSS

github.com 2026-08-22查看中文 →

Security AdvisoryCVE-2026-5200Mediumasymmetric-effort/specifyjs

Affected:

specifyjs < 0.2.136

Fixed in:

0.2.136

Referenced CVEs: CVE-2026-50290 · 5.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

CHIRP Kenwood ITM Driver Arbitrary Code Execution via eval() Injection 2026-08-23 Fix for DCS parsing logic error in Chirp Kenwood driver affecting radio config 2026-08-23 Pre-Auth Stored XSS in Class and Exam Timetabling System v1.0 via 'course' parameter 2026-08-23 MetaTube Insecure Direct Object Reference Leading to User Cookie Disclosure 2026-08-23 Hardening Guide: Securing Docker Socket with Proxy Configuration 2026-08-23

Offline Archive

Offline screenshot & PDF are Pro-exclusive