Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

vega — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in vega, with AI-generated Chinese analysis, references, and POCs.

Vendor: vega

CVE IDTitleCVSSSeverityPublished
CVE-2025-66648 `vega-functions` vulnerable to Cross-site Scripting via `setdata` function CWE-79 7.2 High2026-01-05
CVE-2025-65110 Vega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope CWE-79 8.1 High2026-01-05
CVE-2025-59840 Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable CWE-79 8.1 High2025-11-13
CVE-2025-27793 Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace] CWE-87 5.4AIMediumAI2025-03-27
CVE-2025-26619 Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter` CWE-79 7.1AIHighAI2025-03-27
CVE-2025-25304 Vega allows Cross-site Scripting via the vlSelectionTuples function CWE-79 6.1 -2025-02-14
CVE-2023-35163 Vega's validators able to submit duplicate transactions CWE-20 6.0 Medium2023-06-23
CVE-2023-26486 Vega `scale` expression function cross site scripting CWE-79 6.5 Medium2023-03-03
CVE-2023-26487 Vega has cross-site scripting vulnerability in `lassoAppend` function CWE-79 6.5 Medium2023-03-03
CVE-2020-26296 XSS in Vega CWE-79 8.7 High2020-12-30

All 10 known CVE vulnerabilities affecting vega with full Chinese analysis, references, and POCs where available.