188 matches found
CVE-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter
Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...
EUVD-2026-81672
Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...
CVE-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter
Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...
CVE-2026-61793
nuxt-og-image (NPM module for Nuxt.js), versions >= 6.0.2,
PT-2026-95048
Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at / og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...
PT-2026-94364
Name of the Vulnerable Software and Affected Versions nuxt-og-image versions 6.0.2 through 6.6.x Description An unauthenticated Server-Side Request Forgery SSRF exists when the software is used with default security settings security.strict = false and security.secret = "". The application expose...
CVE-2026-61793: Improper Input Validation
Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...
CVE-2026-85612
OpenPanel before 2.3.0 contains an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /misc/favicon and /misc/og endpoints. These endpoints accept an attacker-supplied url parameter with insufficient validation, allowing an attacker to force the API to fetch arbitrary interna...
CVE-2026-85612 OpenPanel before 2.3.0 SSRF via favicon and og endpoints
OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon and /misc/og endpoints that accept an attacker-supplied url parameter with insufficient validation. Attackers can force the API to fetch arbitrary internal hosts and cloud metadata...
The vulnerability in the `src/runtime/server/og-image/context.ts` file of the Open Graph Image generation module from the Nuxt OG Image framework for creating web applications and sites allows attackers to perform spoofing attacks.
The vulnerability in the src/runtime/server/og-image/context.ts file of the Open Graph Image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites, relates to the loading of external, unreliable data alongside reliable data. Exploiting this...
The vulnerability of the /_og/d/*.png component of the Open Graph image generation module in the Nuxt OG Image framework, which is used for creating web applications and sites using Nuxt.js. This allows attackers to perform spoofing attacks.
The vulnerability of the og/d/.png component of the Open Graph image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites using Nuxt.js, relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability cou...
SUSE CVE-2026-4054
Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header e.g. image/png...
PT-2026-72137
Уязвимость файла src/runtime/server/og-image/context.ts модуля генерации Open Graph OG изображений Nuxt OG Image фреймворка для создания веб-приложений и сайтов Nuxt.js связана с загрузкой внешних ненадёжных данных вместе с надёжными данными. Эксплуатация уязвимости может позволить нарушителю,...
PT-2026-72138
Уязвимость компонента / og/d/.png модуля генерации Open Graph OG изображений Nuxt OG Image фреймворка для создания веб-приложений и сайтов Nuxt.js связана с загрузкой внешних ненадёжных данных вместе с надёжными данными. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо,...
CVE-2026-44589
Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl denylist introduced in [email protected] to remediate GHSA-pqhr-mp3f-hrpp Dmitry Prokhorov / Positive Technologies, March 2026 is incomplete. It has an incomplete IPv6 prefix list and is missing redirect re-validatio...
og-clews-mini-rce-cve
No d...
GHSA-J76W-P754-G2W7 Mattermost doesn't validate the response body of proxied images
Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header e.g. image/png...
Mattermost doesn't validate the response body of proxied images
Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header e.g. image/png...
Improper Check for Unusual or Exceptional Conditions
Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the image proxy process. An attacker can cause a denial of service on client systems by serving malicious SVG files from an attacker-controlled origin with a misleading Content-Ty...