HIGH8.1npm
GHSA-829q-m3qg-ph8r· CVE-2025-65110Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope
Modified: 2/3/2026
package
npm/vega-selections
pkg:npm/vega-selections
MEDIUMnpm
GHSA-mp7w-mhcv-673j· CVE-2025-25304Vega allows Cross-site Scripting via the vlSelectionTuples function
Modified: 2/14/2025