CVE-2026-61793

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

Malicious code in font-assets (RubyGems)

--- Credit: OpenSSF source...

MAL-2024-6913 Malicious code in font-assets (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in font-assets (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview font-assets is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using font-assets...