Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/31 11:26 p.m.59 views

GHSA-PQHR-MP3F-HRPP Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters

Product: Nuxt OG Image Version: injection via html parameter GET /og/d/og.png?html= When verbose errors are enabled, the response content is leaked in base64-encoded error messages. Vector 3: SVG injection via html parameter GET /og/d/og.png?html= Mitigation Fixed in v6.2.5. The image source plug...

5.3CVSS5.9AI score
SaveExploits0References2
Rows per page
Query Builder