Nuxt-Modules / OG-Image

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-61793	Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter	MEDIUM	6.9	Sep 17, 2026
CVE-2026-44589	nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)	LOW	3.7	May 14, 2026
CVE-2026-34405	Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes	MEDIUM	6.1	Mar 31, 2026
CVE-2026-34404	Nuxt OG Image vulnerable to DoS via image generation	MEDIUM	6.9	Mar 31, 2026

Rows per page

Showing 1 to 4 of 4 CVEs