vega-interpreter vulnerabilities (npm)

1 vulnerability.

• vega-interpreter npm Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable CVE-2025-59840 Fix available 8.1 HighNovember 13, 2025