Vega Project Vega
6 CVEs affecting Vega Project Vega. Latest disclosed: 2026-01-05. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-26296 | High | 8.7 | 2020-12-30 | Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega befo… |
CVE-2025-65110 | High | 8.1 | 2026-01-05 | Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, a… |
CVE-2023-26487 | Medium | 6.5 | 2023-03-04 | Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.`lassoAppend' function accepts 3 argu… |
CVE-2023-26486 | Medium | 6.5 | 2023-03-04 | Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. The Vega `scale` expression function… |
CVE-2025-26619 | Medium | 6.1 | 2025-03-27 | Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In `vega` 5.30.0 and lower and in `v… |
CVE-2019-10806 | Medium | 4.3 | 2020-03-09 | vega-util prior to 1.13.1 allows manipulation of object prototype. The 'vega.mergeConfig' method within vega-util could be tricked into adding or modifying pro… |