vega-functions vulnerabilities

CVEs whose affected-version data names the vega-functions package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-66648High· 7.2

9mo ago

vega-functions provides function implementations for the Vega expression language

vega-functions provides function implementations for the Vega expression language. Prior to version 6.1.1, for sites that allow users to supply untrusted user input, malicious use of an internal function (not part of the public API) coul…

▾ Twilightvega-functions_project · vega-functionsEPSS 0.23%via NVD