[Bug]: @fluentui/react-charts - VegaDeclarativeChart - Sandbox escape enables arbitrary JavaScript execution
Author: AtishayMsftCreated Sep 7, 2026Updated Sep 15, 2026
LabelsType: Bug :bug:Needs: Triage :mag:Package: chartingNeeds: Attention
Charting Control
Other...
Package version
NA
React version
NA
Environment
NACurrent Behavior
@fluentui/react-charts - VegaDeclarativeChart - Sandbox escape enables arbitrary JavaScript execution
Expected Behavior
NA
Reproduction
NA
Steps to reproduce
Details in IcM
Are you reporting an Accessibility issue?
None
Suggested severity
Urgent - No workaround and Products/sites are affected
Products/sites affected
No response
Are you willing to submit a PR to fix?
yes
Validations
- Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
- The provided reproduction is a minimal reproducible example of the bug.
Source: microsoft/fluentui