Nuxt-modules - vulnerabilities (CVEs)
7 CVEs in 2 products, 1 in the last 30 days, newest from 2026-10-15.
Products
Newest CVEs of Nuxt-modules
- CVE-2026-102527 - CVSS 6.9 (medium), 2026-10-15: Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2.5 until 6.7.0, the dynamic /_og/d/*.png route accepts unsigned requests while…
- CVE-2026-61793 - CVSS 6.9 (medium), 2026-09-17: Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /_og/d/** route when the…
- CVE-2026-44589 - CVSS 3.7 (low), 2026-05-14: Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl() denylist introduced in nuxt-og-image@6.2.5 to remediate GHSA-pqhr-mp3f-hrpp…
- CVE-2026-34405 - CVSS 6.1 (medium), 2026-03-31: Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older…
- CVE-2026-34404 - CVSS 7.5 (high), 2026-03-31: Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older…
- CVE-2025-54075 - CVSS 8.3 (high), 2025-07-18: MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion /…
- CVE-2025-24981 - CVSS 9.3 (critical), 2025-02-06: MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from…
