# vega.js security updates

Patch Radar has 11 security fixes for vega.js, closing 8 CVEs. The newest is DEBIAN-CVE-2025-65110 (5.33.1+ds+~cs5.3.0-4), released January 5, 2026.

- Web page: https://patchblox.com/security/product/linux/vega.js
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2025-65110](https://patchblox.com/security/data/fix/linux/debian-cve-2025-65110.md) | Jan 5, 2026 | Debian 14 5.33.1+ds+~cs5.3.0-4 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2025-66648](https://patchblox.com/security/data/fix/linux/debian-cve-2025-66648.md) | Jan 5, 2026 | Debian 14 5.33.1+ds+~cs5.3.0-2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-59840](https://patchblox.com/security/data/fix/linux/debian-cve-2025-59840.md) | Nov 13, 2025 | Debian 14 5.33.1+ds+~cs5.3.0-4 | High | 1 | 0 |
| [DEBIAN-CVE-2025-27793](https://patchblox.com/security/data/fix/linux/debian-cve-2025-27793.md) | Mar 27, 2025 | Debian 14 5.33.1+ds+~cs5.3.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-26619](https://patchblox.com/security/data/fix/linux/debian-cve-2025-26619.md) | Mar 27, 2025 | Debian 14 5.33.1+ds+~cs5.3.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-25304](https://patchblox.com/security/data/fix/linux/debian-cve-2025-25304.md) | Feb 14, 2025 | Debian 13.5 (trixie) 5.28.0+ds+~cs5.3.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-25304](https://patchblox.com/security/data/fix/linux/debian-cve-2025-25304.md) | Feb 14, 2025 | Debian 14 5.28.0+ds+~cs5.3.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-26487](https://patchblox.com/security/data/fix/linux/debian-cve-2023-26487.md) | Mar 4, 2023 | Debian 13.5 (trixie) 5.25.0+ds+~cs5.3.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-26487](https://patchblox.com/security/data/fix/linux/debian-cve-2023-26487.md) | Mar 4, 2023 | Debian 14 5.25.0+ds+~cs5.3.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-26486](https://patchblox.com/security/data/fix/linux/debian-cve-2023-26486.md) | Mar 4, 2023 | Debian 13.5 (trixie) 5.25.0+ds+~cs5.3.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-26486](https://patchblox.com/security/data/fix/linux/debian-cve-2023-26486.md) | Mar 4, 2023 | Debian 14 5.25.0+ds+~cs5.3.0-1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo