What’s Vulnerable › Products

Vega-Functions Project Vega-Functions vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Vega-Functions Project Vega-Functions version is affected

Latest Vega-Functions Project Vega-Functions vulnerabilities

• CVE-2025-66648 — `vega-functions` vulnerable to Cross-site Scripting via `setdata` function (CVSS 6.1)
• CVE-2025-26619 — Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter` (CVSS 6.1)
• CVE-2023-26487 — Vega has cross-site scripting vulnerability in `lassoAppend` function (CVSS 6.1)
• CVE-2023-26486 — Vega `scale` expression function cross site scripting (CVSS 6.1)