VYPR
Vendor

Vega Functions Project

Products
1
CVEs
4
Across products
4
Status
Private

Products

1

Recent CVEs

4
  • CVE-2025-66648HigJan 5, 2026
    risk 0.40cvss 7.2epss 0.00

    vega-functions provides function implementations for the Vega expression language. Prior to version 6.1.1, for sites that allow users to supply untrusted user input, malicious use of an internal function (not part of the public API) could be used to run unintentional javascript…

  • CVE-2023-26487MedMar 4, 2023
    risk 0.35cvss 6.5epss 0.01

    Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.`lassoAppend' function accepts 3 arguments and internally invokes `push` function on the 1st argument specifying array consisting of 2nd and 3rd arguments as…

  • CVE-2023-26486MedMar 4, 2023
    risk 0.35cvss 6.5epss 0.01

    Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. The Vega `scale` expression function has the ability to call arbitrary functions with a single controlled argument. The scale expression function passes a…

  • CVE-2025-26619MedMar 27, 2025
    risk 0.33cvss 6.1epss 0.00

    Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In `vega` 5.30.0 and lower and in `vega-functions` 5.15.0 and lower , it was possible to call JavaScript functions from the Vega expression language that…