High severity · published Mar 31, 2026
CVE-2026-34404
Nuxt OG Image vulnerable to DoS via image generation
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a Denial of Service (DoS) vulnerability. The issue arises because there is no restriction on the width and height parameters of the generated image. The vulnerability was reproduced using the standard configuration and the default templates. This issue has been patched in version 6.2.5.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OG
og-image · nuxt-modules
< 6.2.5 · source: vendor
OI
OG Image · Nuxt
before 6.2.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-34404
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-34404
Vendor Advisory
https://github.com/nuxt-modules/og-image/security/advisories/GHSA-c7xp-q6q8-hg76
More from og-image
6.9
CVE-2026-102527
Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes
6.9
CVE-2026-61793
Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter
6.1
CVE-2026-34405
Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes
3.7
CVE-2026-44589
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)