NU
Vendor
nuxt-modules
6
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102527 | OG og-image nuxt-modules | 6.9 | Oct 15 | Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes |
| CVE-2026-61793 | OG og-image nuxt-modules | 6.9 | Sep 17 | Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter |
| CVE-2026-44589 | OG og-image nuxt-modules | 3.7 | May 14 | nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect) |
| CVE-2026-34405 | OG og-image nuxt-modules | 6.1 | Mar 31 | Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes |
| CVE-2026-34404 | OG og-image nuxt-modules | 7.5 | Mar 31 | Nuxt OG Image vulnerable to DoS via image generation |
| CVE-2025-54075 | MD mdc nuxt-modules | 8.3 | Jul 18 | mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4) |