vega vulnerabilities (npm)
8 vulnerabilities.
-
veganpm Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable 8.1 High -
veganpm Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace] 5.3 Medium -
veganpm Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter` 5.3 Medium -
veganpm Vega allows Cross-site Scripting via the vlSelectionTuples function 6.9 Medium -
veganpm Vega vulnerable to arbitrary code execution when clicking href links No score -
veganpm Vega `scale` expression function cross site scripting 6.5 Medium -
veganpm Vega has cross-site scripting vulnerability in `lassoAppend` function 6.5 Medium -
veganpm XSS in Vega 8.7 High