og-image
- Software type
- Other
- Total vulnerabilities (90 days)
- 2
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/21/2026, og-image recorded 2 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of og-image and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-102527Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routesCVE-2026-61793Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameterCVE-2026-44589nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)CVE-2026-34405Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributesCVE-2026-34404Nuxt OG Image vulnerable to DoS via image generation| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-102527Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes | Exploitation statusNot exploited | FixYes | Published10/15/2026 | SeverityMedium |
CVE-2026-61793Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter | Exploitation statusActively exploited | FixYes | Published09/17/2026 | SeverityMedium |
CVE-2026-44589nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect) | Exploitation statusNot exploited | FixYes | Published05/14/2026 | SeverityLow |
CVE-2026-34405Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes | Exploitation statusActively exploited | FixYes | Published03/31/2026 | SeverityMedium |
CVE-2026-34404Nuxt OG Image vulnerable to DoS via image generation | Exploitation statusActively exploited | FixYes | Published03/31/2026 | SeverityMedium |
5 Results | Page 1 of 1