Skip to main content

Vega

6 CVEs product

Monthly

CVE-2025-65110 Jan 05, 22:15 npm HIGH POC PATCH This Week

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used. [CVSS 8.1 HIGH]

XSS RCE Red Hat Vega Vega Project
NVD GitHub
CVSS 3.1
8.1
EPSS
0.1%
CVE-2025-26619 Mar 27, 14:15 npm MEDIUM POC PATCH This Month

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Vega Vega Functions Vega Project Vega Functions Project
NVD GitHub
CVSS 4.0
5.3
EPSS
0.2%
CVE-2023-35163 Jun 23, 21:15 Go MEDIUM POC PATCH This Month

Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Rated medium severity (CVSS 5.2), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Vega
NVD GitHub
CVSS 3.1
5.2
EPSS
0.5%
CVE-2023-26487 Mar 04, 00:15 npm MEDIUM POC PATCH This Month

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.`lassoAppend' function accepts 3 arguments and internally invokes `push`. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Vega Vega Functions Vega Project Vega Functions Project
NVD GitHub
CVSS 3.1
6.1
EPSS
0.8%
CVE-2023-26486 Mar 04, 00:15 npm MEDIUM POC PATCH This Month

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Vega Vega Functions Vega Project Vega Functions Project
NVD GitHub
CVSS 3.1
6.1
EPSS
0.8%
CVE-2020-26296 Dec 30, 23:15 npm HIGH PATCH This Week

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Node.js Vega Vega Project
NVD GitHub
CVSS 3.1
8.7
EPSS
1.4%
EPSS 0% CVSS 8.1
HIGH POC PATCH This Week

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used. [CVSS 8.1 HIGH]

XSS RCE Red Hat +2
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM POC PATCH This Month

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Vega Vega Functions +2
NVD GitHub
EPSS 0% CVSS 5.2
MEDIUM POC PATCH This Month

Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Rated medium severity (CVSS 5.2), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Vega
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.`lassoAppend' function accepts 3 arguments and internally invokes `push`. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Vega Vega Functions +2
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Vega Vega Functions +2
NVD GitHub
EPSS 1% CVSS 8.7
HIGH PATCH This Week

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Node.js Vega +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy