CVE-2019-10806

Medium

Advisory

Published 7 May 2021In the index since 8 Sept 2026

Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
vega-utilnpm	1.7.1	1.13.1	2

2 by stars

Chart

Latest

Affected images

Radar Score

daskcloudnativeapp

1 of the 2 container images this version deploys carry CVE-2019-10806.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	vega-util@1.7.1	1.13.1

29,901

1 of the 3 container images this version deploys carry CVE-2019-10806.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	vega-util@1.7.1	1.13.1

7,929

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	vega-util@1.7.1	1.13.1	1
daskdev/dask-notebook :1.1.0	052630f5ca04	vega-util@1.7.1	1.13.1	1