MEDIUM6.1npm
GHSA-4vq7-882g-wcg4· CVE-2023-26486Vega Expression Language `scale` expression function Cross Site Scripting
Modified: 9/10/2026
package
pkg:npm/vega-functions
Vega Expression Language `scale` expression function Cross Site Scripting
Modified: 9/10/2026
Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace]
Modified: 3/27/2025
`vega-functions` vulnerable to Cross-site Scripting via `setdata` function
Modified: 9/10/2026
Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode expressionInterpeter
Modified: 9/10/2026
Vega has Cross-site Scripting vulnerability in `lassoAppend` function
Modified: 9/10/2026