VendorsVega-functions Projectvega-functionsany version
Vulnerabilities

Vega-functions Project Vega-functions any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2025-66648
`vega-functions` vulnerable to Cross-site Scripting via `setdata` function
Published 2026-01-05 · Analyzed
7.2EPSS 0.002
CVE-2023-26487
Vega has cross-site scripting vulnerability in `lassoAppend` function
Published 2023-03-03 · Modified
6.5EPSS 0.008
CVE-2023-26486
Vega `scale` expression function cross site scripting
Published 2023-03-03 · Modified
6.5EPSS 0.008
CVE-2025-26619
Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter`
Published 2025-03-27 · Analyzed
6.1EPSS 0.003