vega-functions
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| `vega-functions` vulnerable to Cross-site Scripting via `setdata` function | vega-functions | npm | High | Fix reported | |
| Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode expressionInterpeter | vega-functionsvega | npm | Medium | Fix reported | |
| Vega has Cross-site Scripting vulnerability in `lassoAppend` function | vega-functionsvega | npmRed Hat | Medium | Fix reported | |
| Vega Expression Language `scale` expression function Cross Site Scripting | vega-functionsvega | npmRed Hat | Medium | Fix reported | |
| Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace] | vega-functionsvega | npm | Medium | Fix reported |