PT-2023-33009 · Vega · Vega

Publicado 2023-03-02 · Atualizado 2023-03-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Vega versions prior to 4.5.1 Vega versions prior to 5.4.1

Description The issue allows for arbitrary code execution when clicking href links.

Recommendations For versions prior to 4.5.1, update to version 4.5.1 to resolve the issue. For versions prior to 5.4.1, update to version 5.4.1 to resolve the issue.

Identificadores relacionados

GHSA-CP47-R258-Q626

Produtos afetados

Vega

Referências · 7

• https://github.com/vega/vega · Nota
• https://github.com/vega/vega/commit/692327013eb4dd5adec0c47a620181af1b135e2a · Nota
• https://github.com/vega/vega/commits/v4.5.1 · Nota
• https://github.com/vega/vega/pull/1892 · Nota
• https://github.com/vega/vega/commits/v5.4.1 · Nota
• https://github.com/vega/vega/security/advisories/GHSA-cp47-r258-q626 · Nota
• https://osv.dev/vulnerability/GHSA-cp47-r258-q626 · Aviso do Fabricante