OsVault/npm/vega-functions
npm

vega-functions

4 known vulnerabilities · 0 critical · 0 high

CVE-2023-26487MEDIUM

Vega has Cross-site Scripting vulnerability in `lassoAppend` function

Published Mar 2, 2023
CVE-2023-26486MEDIUM

Vega Expression Language `scale` expression function Cross Site Scripting

Published Mar 2, 2023
CVE-2025-66648

`vega-functions` vulnerable to Cross-site Scripting via `setdata` function

Published Jan 5, 2026
CVE-2025-27793

Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace]

Published Mar 27, 2025
Check your entire dependency tree at onceRun dependency scan →