All products

vega-expression

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variableCVE-2025-59840 · GHSA-7F2V-3QQ3-VVJF vega-expressionvega-interpreter npmRed Hat High Fix reported