Skip to content
Nuxt-modules vulnerabilities
Newest
-
nuxt-modules og-image
Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes
CVE-2026-102527
Fix available
6.9 Medium
-
nuxt-modules og-image
Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter
CVE-2026-61793
Fix available
6.9 Medium
-
nuxt-content mdc
@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration
CVE-2026-63671
Fix available
8.1 High
-
nuxt-modules og-image
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)
CVE-2026-44589
Fix available
3.7 Low
-
nuxt og image, nuxt-modules og-image +1 more
Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes
CVE-2026-34405
Fix available
6.1 Medium
-
nuxt og image, nuxt-modules og-image +1 more
Nuxt OG Image vulnerable to DoS via image generation
CVE-2026-34404
Fix available
6.9 Medium
-
nuxt-modules mdc
mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)
CVE-2025-54075
Fix available
8.3 High
-
nuxt-modules mdc
Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc
CVE-2025-24981
Fix available
9.3 Critical