GHSA-cp47-r258-q626
GHSA-cp47-r258-q626 · Vega vulnerable to arbitrary code execution when clicking href links
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Vega is vulnerable to arbitrary code execution when clicking href links. Versions 5.4.1 and 4.5.1 contain a patch.
Fix available
- Published
- Updated
Stack: node
Affected products and versions
Original sources
- https://github.com/vega/vega/security/advisories/GHSA-cp47-r258-q626
- https://github.com/vega/vega/pull/1892
- https://github.com/vega/vega/commit/692327013eb4dd5adec0c47a620181af1b135e2a
- https://github.com/vega/vega
- https://github.com/vega/vega/commits/v4.5.1
- https://github.com/vega/vega/commits/v5.4.1
- https://osv.dev/vulnerability/GHSA-cp47-r258-q626