PT-2026-115015

Name of the Vulnerable Software and Affected Versions Nuxt OG Image versions 6.2.5 through 6.6.x Description An unauthenticated attacker can perform content spoofing by manipulating the cache of Open Graph images. The dynamic endpoint / og/d/.png accepts unsigned requests, and the...

Nuxt Modules nuxt-og-image trust management issue vulnerability

Nuxt Modules’ nuxt-og-image version 6.2.5 to 6.7.0 contain a trust management issue. This vulnerability arises from the dynamic/og/d/.png routing mechanism accepting unsigned requests. Additionally, the resolvePathCacheKey function can derive cache keys from the request path, site URL, and...