Skip to content
OpenAdvisories

Package · npm

vega-functions

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-66648

    `vega-functions` vulnerable to Cross-site Scripting via `setdata` function

    vega-functions provides function implementations for the Vega expression language. Prior to version 6.1.1, for sites that allow users to supply untrusted user input, malicious use of an internal function (not part of the public API) could be used to run unint…

    vega vega jupyter-base-notebook py3.13-jupyterlab Debian Ubuntu Wolfi npm