Log in Start free

vega

Products

ProductCVEsExploitedLatest
vega9–Jan 5, 2026

Exploited and recent CVEs

  • CVE-2025-66648 High 7.2 `vega-functions` vulnerable to Cross-site Scripting via `setdata` function 0.2%
  • CVE-2025-65110 High 8.1 Vega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope 0.5%
  • CVE-2025-59840 High 8.1 Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable 0.4%
  • CVE-2025-27793 Medium 5.3 Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace] 0.5%
  • CVE-2025-26619 Medium 5.3 Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter` 0.4%
  • CVE-2025-25304 Medium 6.9 Vega allows Cross-site Scripting via the vlSelectionTuples function 0.7%
  • CVE-2023-26486 Medium 6.5 Vega `scale` expression function cross site scripting 0.8%
  • CVE-2023-26487 Medium 6.5 Vega has cross-site scripting vulnerability in `lassoAppend` function 0.8%
  • CVE-2020-26296 High 8.7 XSS in Vega 1.7%