CVE-2025-65110

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used. First, they use `vega` in an application that attaches both `vega` library and a `vega.View` instance similar to the Vega Editor to the global `window`, or has any other satisfactory function gadgets in the global scope. Second, they allow user-defined Vega `JSON` definitions (vs JSON that was is only provided through source code). This vulnerability allows for DOM XSS, potentially stored, potentially reflected, depending on how the library is being used. The vulnerability requires user interaction with the page to trigger. An attacker can exploit this issue by tricking a user into opening a malicious Vega specification. Successful exploitation allows the attacker to execute arbitrary JavaScript in the context of the application’s domain. This can lead to theft of sensitive information such as authentication tokens, manipulation of data displayed to the user, or execution of unauthorized actions on behalf of the victim. This exploit compromises confidentiality and integrity of impacted applications.Patched versions are available in `vega-selections@6.1.2` (requires ESM) for Vega v6 and `vega-selections@5.6.3` (no ESM needed) for Vega v5. As a workaround, do not attach `vega` or `vega.View` instances to global variables or the window as the editor used to do. This is a development-only debugging practice that should not be used in any situation where Vega/Vega-lite definitions can come from untrusted parties.

• CWE-79

• https://github.com/vega/vega/security/advisories/GHSA-829q-m3qg-ph8rExploit, Vendor Advisory
• https://github.com/vega/vega/security/advisories/GHSA-829q-m3qg-ph8rExploit, Vendor Advisory

Published

Jan 5, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-65105Apptainer is an open source container platform. In Apptainer…5.3
• CVE-2025-65106LangChain is a framework for building agents and LLM-powered…8.3
• CVE-2025-65107Langfuse is an open source large language model engineering …6.5
• CVE-2025-65108md-to-pdf is a CLI tool for converting Markdown files to PDF…10
• CVE-2025-65109Minder is an open source software supply chain security plat…8.5
• CVE-2025-6511A vulnerability classified as critical has been found in Net…8.8
• CVE-2025-65111SpiceDB is an open source database system for creating and m…5.3
• CVE-2025-65112PubNet is a self-hosted Dart & Flutter package service. Prio…9.8
• CVE-2025-65113ClipBucket v5 is an open source video sharing platform. Prio…6.5
• CVE-2025-65114Apache Traffic Server allows request smuggling if chunked me…7.5
• CVE-2025-65115Remote Code Execution Vulnerability in JP1/IT Desktop Manage…9.8
• CVE-2025-65116Buffer Overflow Vulnerability in JP1/IT Desktop Management 2…5.5