vega.js vulnerabilities (Debian)
8 vulnerabilities.
-
vega.jsDebian `vega-functions` vulnerable to Cross-site Scripting via `setdata` function 7.2 High -
vega.jsDebian Vega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope 8.1 High -
vega.jsDebian Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable 8.1 High -
vega.jsDebian Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace] 5.3 Medium -
vega.jsDebian Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter` 5.3 Medium -
vega.jsDebian Vega allows Cross-site Scripting via the vlSelectionTuples function 6.9 Medium -
vega.jsDebian Vega `scale` expression function cross site scripting 6.5 Medium -
vega.jsDebian Vega has cross-site scripting vulnerability in `lassoAppend` function 6.5 Medium