Skip to contentVega-functions Project Vega-functions vulnerabilities
- vega, vega-functions project vega-functions +1 more`vega-functions` vulnerable to Cross-site Scripting via `setdata` functionCVE-2025-66648Fix available7.2 High
- vega, vega-functions project vega-functions +1 moreVega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter`CVE-2025-26619Fix available5.3 Medium
- gobalsky vega, vega-functions project vega-functions +1 moreVega's validators able to submit duplicate transactionsCVE-2023-35163Fix available6.0 Medium
- vega, vega-functions project vega-functions +1 moreVega `scale` expression function cross site scriptingCVE-2023-26486Fix available6.5 Medium
- vega, vega-functions project vega-functions +1 moreVega has cross-site scripting vulnerability in `lassoAppend` functionCVE-2023-26487Fix available6.5 Medium