CVE-2025-68387

Name of the Vulnerable Software and Affected Versions Vega AST Evaluator (affected versions not specified)

Description A flaw exists in the Vega AST evaluator function handler that allows an unauthenticated user to inject a malicious script into web content. This can lead to cross-site scripting (XSS) attacks. The issue is due to improper neutralization of input during web page generation. The vulnerability resides in a function handler within the Vega AST evaluator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.