CVE-2020-26296
1 advisory.
npm/vega CVE-2020-26296: high 8.7
XSS in Vega
Action: Upgrade vega to 5.17.3 or later.
npm i vega@5.17.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.17.3 | - |
Fixed versions
| 5.17.3 |
Sources
- osv: GHSA-r2qc-w64x-6j54
- https://github.com/vega/vega/security/advisories/GHSA-r2qc-w64x-6j54
- https://nvd.nist.gov/vuln/detail/CVE-2020-26296
- https://github.com/vega/vega/issues/3018
- https://github.com/vega/vega/pull/3019
- https://github.com/vega/vega/releases/tag/v5.17.3
- https://www.npmjs.com/package/vega
CVE-2020-26296 · published · modified · JSON