Security Advisory

CVE-2020-26296

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-30 23:10:16

Last updated 2024-08-04 15:56:04

Assigner GitHub_M

State PUBLISHED

Description

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulnerability in Vega expressions. Through a specially crafted Vega expression, an attacker could execute arbitrary javascript on a victims machine. This is fixed in version 5.17.3

← Browse all CVEs View on cve.org ↗