Skip to content
OpenAdvisories

Vendor

nuxt-modules

7 known vulnerabilities.

Products

og-image 5 mdc 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-102527

    Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes

    Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2.5 until 6.7.0, the dynamic /_og/d/*.png route accepts unsigned requests while resolvePathCacheKey() produces cache keys from the request path, site URL, and normalized rendering options ex…

    nuxt-modules og-image nuxt-og-image npm
  • Medium 6.9
    CVE-2026-61793

    Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

    Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /_og/d/** route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the f…

    nuxt-modules og-image nuxt-og-image npm
  • Medium 6.1
    CVE-2026-34405

    Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes

    Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a vulnerability that allows injection of arbitrary attributes into the HTML …

    nuxt-modules og-image nuxt-og-image npm
  • Medium 6.9
    CVE-2026-34404

    Nuxt OG Image vulnerable to DoS via image generation

    Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a Denial of Service (DoS) vulnerability. The issue arises because there is n…

    nuxt-modules og-image nuxt-og-image npm