vega.js vulnerabilities (Ubuntu)
6 vulnerabilities.
-
vega.jsUbuntu `vega-functions` vulnerable to Cross-site Scripting via `setdata` function 7.2 High -
vega.jsUbuntu Vega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope 8.1 High -
vega.jsUbuntu Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable 8.1 High -
vega.jsUbuntu Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace] 5.3 Medium -
vega.jsUbuntu Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter` 5.3 Medium -
vega.jsUbuntu Vega allows Cross-site Scripting via the vlSelectionTuples function 6.9 Medium