Skip to content
Vega-functions Project vulnerabilities
Newest
-
vega, vega-functions project vega-functions +1 more
`vega-functions` vulnerable to Cross-site Scripting via `setdata` function
CVE-2025-66648
Fix available
7.2 High
-
vega, vega-functions project vega-functions +1 more
Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter`
CVE-2025-26619
Fix available
5.3 Medium
-
gobalsky vega, vega-functions project vega-functions +1 more
Vega's validators able to submit duplicate transactions
CVE-2023-35163
Fix available
6.0 Medium
-
vega, vega-functions project vega-functions +1 more
Vega `scale` expression function cross site scripting
CVE-2023-26486
Fix available
6.5 Medium
-
vega, vega-functions project vega-functions +1 more
Vega has cross-site scripting vulnerability in `lassoAppend` function
CVE-2023-26487
Fix available
6.5 Medium