Nnuxt-modules

Products

Exploited and recent CVEs

• CVE-2026-102527 Medium 6.9 Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes 0.2%
• CVE-2026-61793 Medium 6.9 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter 0.5%
• CVE-2026-44589 Low 3.7 nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect) 0.2%
• CVE-2026-34405 Medium 6.1 Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes 0.2%
• CVE-2026-34404 Medium 6.9 Nuxt OG Image vulnerable to DoS via image generation 0.3%
• CVE-2025-54075 High 8.3 mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4) 0.3%
• CVE-2025-24981 Critical 9.3 Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc 0.7%