vega vulnerabilities and fixes
Recent CVEs affecting vega, with upgrade or downgrade steps. 2 tracked.
vega has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-05. Highest priority: CVE-2025-65110 (score 44/100).
- CVE-2025-65110 HIGH 8.1 UPGRADE Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualizat
- CVE-2025-26619 MEDIUM 6.1 UPGRADE UPGRADE Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualizat
FAQ
How do I fix vega vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vega being exploited right now?
None of the tracked vega CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vega CVE should I patch first?
CVE-2025-65110 currently ranks highest (44/100): Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualizat.