Server-Side Request Forgery (SSRF)

Nuxt OG Image is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of attacker-controlled font URLs before performing server-side requests, which allows an unauthenticated attacker to access internal services such as loopback, private, link-local,...

CVE-2026-61793

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

GHSA-Q8HW-4FVP-9RWV Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at /og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...

NPM: Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

NPM: Nuxt OG Image has unauthenticated SSRF via fonts.path URL parameter vulnerability discovered by ? in WordPress Npm nuxt-og-image versions = 6.0.2, 6.7.0...

Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at /og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...

@uxfront/layer-app (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-61793 via nuxt-og-image (6.6.0)

nuxt-og-image NPM version 6.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt-og-image and may be impacted: - @uxfront/layer-app =0.1.0, =0.2.0 Source cves: CVE-2026-61793 Source advisory: OSV:GHSA-Q8HW-4FVP-9RWV...

CVE-2026-61793

nuxt-og-image (NPM module for Nuxt.js), versions &gt;= 6.0.2,

CVE-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

CVE-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

EUVD-2026-81672

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

CVE-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

PT-2026-95048

Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at / og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...

PT-2026-94364

Name of the Vulnerable Software and Affected Versions nuxt-og-image versions 6.0.2 through 6.6.x Description An unauthenticated Server-Side Request Forgery SSRF exists when the software is used with default security settings security.strict = false and security.secret = "". The application expose...

CVE-2026-61793: Improper Input Validation

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

The vulnerability in the `src/runtime/server/og-image/context.ts` file of the Open Graph Image generation module from the Nuxt OG Image framework for creating web applications and sites allows attackers to perform spoofing attacks.

The vulnerability in the src/runtime/server/og-image/context.ts file of the Open Graph Image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites, relates to the loading of external, unreliable data alongside reliable data. Exploiting this...

The vulnerability of the /_og/d/*.png component of the Open Graph image generation module in the Nuxt OG Image framework, which is used for creating web applications and sites using Nuxt.js. This allows attackers to perform spoofing attacks.

The vulnerability of the og/d/.png component of the Open Graph image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites using Nuxt.js, relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability cou...

PT-2026-72137

Уязвимость файла src/runtime/server/og-image/context.ts модуля генерации Open Graph OG изображений Nuxt OG Image фреймворка для создания веб-приложений и сайтов Nuxt.js связана с загрузкой внешних ненадёжных данных вместе с надёжными данными. Эксплуатация уязвимости может позволить нарушителю,...

PT-2026-72138

Уязвимость компонента / og/d/.png модуля генерации Open Graph OG изображений Nuxt OG Image фреймворка для создания веб-приложений и сайтов Nuxt.js связана с загрузкой внешних ненадёжных данных вместе с надёжными данными. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо,...

CVE-2026-44589

Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl denylist introduced in [email protected] to remediate GHSA-pqhr-mp3f-hrpp Dmitry Prokhorov / Positive Technologies, March 2026 is incomplete. It has an incomplete IPv6 prefix list and is missing redirect re-validatio...

CVE-2026-44589

Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl denylist introduced in [email protected] to remediate GHSA-pqhr-mp3f-hrpp Dmitry Prokhorov / Positive Technologies, March 2026 is incomplete. It has an incomplete IPv6 prefix list and is missing redirect re-validatio...