due to insufficient sanitazation in Vega’s `convert()` function when `safeMode`...
Vulnerability Description
due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker can craft a malicious Vega diagram specification that will allow them to send requests to any URL, including local file system paths, leading to exposure of sensitive information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14896
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Catalin Iovita (Snyk Security Research)
Affected Vendor
yuzutech
View all reports →