nuxt-modules vulnerabilities
7 published CVEs name nuxt-modules among the affected products.
- 7Published CVEs7 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102527
Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes
nuxt-modules · og-image
Medium6.9 - CVE-2026-61793
Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter
nuxt-modules · og-image
Medium6.9 - CVE-2026-44589
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)
nuxt-modules · og-image
Low3.7 - CVE-2026-34405
Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes
nuxt-modules · og-image
Medium6.1 - CVE-2026-34404
Nuxt OG Image vulnerable to DoS via image generation
nuxt-modules · og-image
Medium6.9 - CVE-2025-54075
mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)
nuxt-modules · mdc
High8.3 - CVE-2025-24981
Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc
nuxt-modules · mdc
Critical9.3