Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Vega-functions Project Component: Vega-functions Clear all filters
TI-2023-11633 CVE-2023-26486 · GHSA-4vq7-882g-wcg4

Vega `scale` expression function cross site scripting

Priority LOW 36

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00775 Published 2023-03-03 Partial fix · 5.13.1, 5.23.0 CWE-79
TI-2023-11634 CVE-2023-26487 · GHSA-w5m3-xh75-mp55

Vega has cross-site scripting vulnerability in `lassoAppend` function

Priority LOW 36

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.`lassoAppend' function accepts 3 arguments and internally invokes `push` function on the 1st argum…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00806 Published 2023-03-03 Partial fix · 5.23.0, 5.13.1 CWE-79