HIGH8.1npm
GHSA-7f2v-3qq3-vvjf· CVE-2025-59840Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable
Modified: 9/10/2026
package
npm/vega-expression
pkg:npm/vega-expression
package
pkg:npm/vega-expression
Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable
Modified: 9/10/2026