Login Request a demo
OG
Product
og-image
by nuxt-modules · last CVE Oct 15, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 1
Severity
All severities5Critical0High1Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add og-image to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34404
7.5
0%
Mar 31
Nuxt OG Image vulnerable to DoS via image generation
Affected: < 6.2.5
CVE-2026-102527
6.9
0%
Oct 15
Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes
Affected: >= 6.2.5, < 6.7.0
CVE-2026-61793
6.9
0%
Sep 17
Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter
Affected: >= 6.0.2, < 6.7.0
CVE-2026-34405
6.1
0%
Mar 31
Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes
Affected: < 6.2.5
CVE-2026-44589
3.7
0%
May 14
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)
Affected: >= 6.2.5, < 6.4.9
Showing 5