Vega Project Vega vulnerabilities
- vegaVega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope8.1 High
- vega, vega-functions project vega-functions +1 moreVega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter`5.3 Medium
- vega, vega-functions project vega-functions +1 moreVega `scale` expression function cross site scripting6.5 Medium
- vega, vega-functions project vega-functions +1 moreVega has cross-site scripting vulnerability in `lassoAppend` function6.5 Medium
- vegaXSS in Vega8.7 High
- vega project vegaImproperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util4.3 Medium