https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:02:47.356912+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-54470 cnvd-2020-54470 2026-10-07T07:02:47.359949+00:00 cnvd-2020-54470 https://cve.radiocsirt.org/vuln/euvd-2026-54006 EUVD-2026-54006 2026-10-07T07:02:47.359986+00:00 EUVD-2026-54006 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10806 fkie_cve-2019-10806 2026-10-07T07:02:47.360007+00:00

vega-util prior to 1.13.1 allows manipulation of object prototype. The 'vega.mergeConfig' method within vega-util could be tricked into adding or modifying properties of the Object.prototype.

 https://cve.radiocsirt.org/vuln/ghsa-6hwh-rqwf-cxxr GHSA-6hwh-rqwf-cxxr — Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util 2026-10-07T07:02:47.360047+00:00

Affected: npm: vega-util

vega-util prior to 1.13.1 allows manipulation of object prototype. The 'vega.mergeConfig' method within vega-util could be tricked into adding or modifying properties of the Object.prototype.

 https://cve.radiocsirt.org/vuln/gsd-2019-10806 gsd-2019-10806 2026-10-07T07:02:47.360083+00:00 gsd-2019-10806