CVE-2026-59158

Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, src/module.ts unconditionally merges all module options, including a configured cloud apikey, into runtimeConfig.public.ollama. Nuxt serializes this public configuration into the server-rendered...

CVE-2026-59158 Nuxt Ollama: public runtime configuration discloses the configured cloud API key

Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, src/module.ts unconditionally merges all module options, including a configured cloud apikey, into runtimeConfig.public.ollama. Nuxt serializes this public configuration into the server-rendered...