What’s Vulnerable › Products

nuxt-modules og-image vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your nuxt-modules og-image version is affected

Latest nuxt-modules og-image vulnerabilities

• CVE-2026-102527 — Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes (CVSS 6.9)
• CVE-2026-61793 — Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter (CVSS 6.9)
• CVE-2026-44589 — nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect) (CVSS 3.7)
• CVE-2026-34405 — Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes (CVSS 6.1)
• CVE-2026-34404 — Nuxt OG Image vulnerable to DoS via image generation (CVSS 7.5)