Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
C
Malicious Package
Affects
symphony-vega
| Versions
*
L
Cross-site Scripting (XSS)
CVE-2025-59840
Affects
vega
| Versions
<5.33.1
>=6.0.0 <6.2.0
M
Cross-site Scripting (XSS)
CVE-2025-25304
Affects
vega
| Versions
<5.26.0
M
Cross-site Scripting (XSS)
CVE-2023-26486
Affects
vega
| Versions
<5.23.0
M
Cross-site Scripting (XSS)
CVE-2023-26487
Affects
vega
| Versions
<5.23.0
M
Arbitrary Code Execution
Affects
vega
| Versions
<5.5.0
H
Cross-site Scripting (XSS)
CVE-2020-26296
Affects
vega
| Versions
<5.17.3
H
Cross-site Scripting (XSS)
Affects
vega
| Versions
<5.17.1
M
Cross-site Scripting (XSS)
Affects
vega
| Versions
<2.4.0
L
Insecure Configuration
Affects
vega-embed
| Versions
<6.7.0
C
Malicious Package
Affects
vega-embed-v5
| Versions
*
C
Malicious Package
Affects
vega-embed-v6
| Versions
*
L
Cross-site Scripting (XSS)
CVE-2025-59840
Affects
vega-expression
| Versions
<5.2.1
>=6.0.0 <6.1.0
M
Cross-site Scripting (XSS)
CVE-2025-66648
Affects
vega-functions
| Versions
>=5.8.0 <6.1.1
M
Cross-site Scripting (XSS)
CVE-2025-27793
Affects
vega-functions
| Versions
<5.17.0
M
Cross-site Scripting (XSS)
CVE-2025-26619
Affects
vega-functions
| Versions
<5.16.0
M
Cross-site Scripting (XSS)
CVE-2023-26486
Affects
vega-functions
| Versions
<5.13.1
M
Cross-site Scripting (XSS)
CVE-2023-26487
Affects
vega-functions
| Versions
<5.13.1
L
Cross-site Scripting (XSS)
CVE-2025-59840
Affects
vega-interpreter
| Versions
<1.2.1
>=2.0.0 <2.2.1
M
Cross-site Scripting (XSS)
CVE-2025-65110
Affects
vega-selections
| Versions
<5.6.3
>=6.0.0 <6.1.2
M
Cross-site Scripting (XSS)
CVE-2025-25304
Affects
vega-selections
| Versions
<5.4.2
M
Prototype Pollution
CVE-2019-10806
Affects
vega-util
| Versions
<1.13.1
C
Malicious Package
Affects
@volcenjine/vegame
| Versions
*