TI-2025-41032 CVE-2025-66648 · GHSA-m9rg-mr6g-75gm
`vega-functions` vulnerable to Cross-site Scripting via `setdata` function
Priority LOW 37
vega-functions provides function implementations for the Vega expression language.
Vulnerabilities
4 records
TI-2025-19556 CVE-2025-26619 · GHSA-rcw3-wmx7-cphr
Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter`
Priority MEDIUM 63
Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.
TI-2023-11633 CVE-2023-26486 · GHSA-4vq7-882g-wcg4
Vega `scale` expression function cross site scripting
Priority LOW 36
Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.
TI-2023-11634 CVE-2023-26487 · GHSA-w5m3-xh75-mp55
Vega has cross-site scripting vulnerability in `lassoAppend` function
Priority LOW 36
Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.`lassoAppend' function accepts 3 arguments and internally invokes `push` function on the 1st argum…