pkg:npm/vega-selections

2 total CVEsHIGH1

✅ Check your installed version

All known vulnerabilities

  • HIGH8.1CVE-2025-65110Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope
    from 0, < 5.6.3
  • —CVE-2025-25304Vega allows Cross-site Scripting via the vlSelectionTuples function
    from 0, < 5.4.2