PT-2023-33009 · Vega · Vega

Published 2023-03-02 · Updated 2023-03-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Vega versions prior to 4.5.1 Vega versions prior to 5.4.1

Description The issue allows for arbitrary code execution when clicking href links.

Recommendations For versions prior to 4.5.1, update to version 4.5.1 to resolve the issue. For versions prior to 5.4.1, update to version 5.4.1 to resolve the issue.

Related Identifiers

GHSA-CP47-R258-Q626

Affected Products

Vega

References · 7

• https://osv.dev/vulnerability/GHSA-cp47-r258-q626 · Vendor Advisory
• https://github.com/vega/vega · Note
• https://github.com/vega/vega/commit/692327013eb4dd5adec0c47a620181af1b135e2a · Note
• https://github.com/vega/vega/commits/v4.5.1 · Note
• https://github.com/vega/vega/pull/1892 · Note
• https://github.com/vega/vega/commits/v5.4.1 · Note
• https://github.com/vega/vega/security/advisories/GHSA-cp47-r258-q626 · Note