Skip to content

Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope

High severity GitHub Reviewed Published Jan 5, 2026 in vega/vega • Updated Jan 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts