GHSA-cp47-r258-q626
Vega vulnerable to arbitrary code execution when clicking href links
Vega is vulnerable to arbitrary code execution when clicking href links. Versions 5.4.1 and 4.5.1 contain a patch.
What each source reports
GitHub AdvisoriesNo score
Vega vulnerable to arbitrary code execution when clicking href links
Vega is vulnerable to arbitrary code execution when clicking href links. Versions 5.4.1 and 4.5.1 contain a patch.
- Record
GHSA-cp47-r258-q626- Updated
- 2026-11-02
OSVNo score
Vega vulnerable to arbitrary code execution when clicking href links
Vega is vulnerable to arbitrary code execution when clicking href links. Versions 5.4.1 and 4.5.1 contain a patch.
- Record
GHSA-cp47-r258-q626- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-cp47-r258-q626 is a vulnerability with no CVSS score yet in vega, published March 2, 2023. No source lists public exploit code. Fixed in vega 5.4.1.