Nuxt-Modules

7 CVEs in 2 Nuxt-Modules products, including Og-Image, Mdc. Newest: CVE-2026-102527 (2026-10-15). Severity, EPSS and public exploits for each.

Nuxt-Modules products with known CVEs

ProductCVEs
Og-Image5
Mdc2
Nuxt-Modules CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1025272026-10-15Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2.5 until 6.7.0, the dynamic /_og/d/*.png route accepts unsigned requests while resolvePat…
CVE-2026-617932026-09-17Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /_og/d/** route when the docume…
CVE-2026-44589Low3.72026-05-14Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl() denylist introduced in nuxt-og-image@6.2.5 to remediate GHSA-pqhr-mp3f-hrpp (D…
CVE-2026-34405Medium6.12026-03-31Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older version…
CVE-2026-34404High7.52026-03-31Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older version…
CVE-2025-54075High8.32025-07-18MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion / stored…
CVE-2025-24981Critical9.32025-02-06MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from m…