3 matches found
EUVD-2026-30364
Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl denylist introduced in [email protected] to remediate GHSA-pqhr-mp3f-hrpp Dmitry Prokhorov / Positive Technologies, March 2026 is incomplete. It has an incomplete IPv6 prefix list and is missing redirect re-validatio...
EUVD-2026-17668
Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /og/d/ and, in older versions, /og-image/ contains a Denial of Service DoS vulnerability. The issue arises because there is no restriction on the width and height...
@cssninja/nuxt-media-viewer (>=0.0.1, <=0.0.15), @enab/uipkg (>=0.0.2-beta.0, <=0.0.2-beta.23) +4 more potentially affected by CVE-2025-54387 via ipx (>=1.0.0, <=1.1.0)
ipx NPM version =1.0.0, =0.0.1, =0.0.2-beta.0, =0.1.0, =1.0.0-27821548.ab054e4, =0.0.3-beta, =0.0.4 Source cves: CVE-2025-54387 Source advisory: OSV:GHSA-MM3P-J368-7JCR...