GCVE - cpe:2.3:a:nuxt:og_image:*:*:*:*:*:node.js:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nuxt:og_image:*:*:*:*:*:node.js:*:*

part: a version: * update: *

Vendor	Nuxt (`54f49c10-5fda-5738-9871-ec26d94a08d8`)
Product	Og Image (`7e9c27cf-b393-52eb-bd0b-4f32c4e42943`)
Edition	*
Language	*
Software edition	*
Target software	node.js
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/nuxt-modules/og-image`	purl2cpe	2026-06-01 10:16:50.831180
`pkg:npm/nuxt-og-image`	purl2cpe	2026-06-01 10:16:50.831182

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-56698`	vulnerable	2026-07-29 01:00:29.254775	Nuxt - Cross-Site Scripting via navigateTo open Option MEDIUM (6.1) Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 fail to validate script-capable URLs in the navigateTo open option, allowing client-side script execution. Attackers can supply javascript: URLs through the open parameter to execute arbitrary scripts in the application's origin when user-controlled input is passed to navigateTo. Published: 2026-06-22T21:04:53.739Z Updated: 2026-06-23T15:05:45.501Z Open on db.gcve.eu Reference links https://github.com/nuxt/nuxt/security/advisories/GHSA-c9cv-mq2m-ppp3 https://github.com/nuxt/nuxt/commit/3394716d4a913cba904b028df5338f2aead50032 https://github.com/nuxt/nuxt/commit/62fc32eddf648b00a3890141e0235d2a222b024d https://www.vulncheck.com/advisories/nuxt-cross-site-scripting-via-navigateto-open-option	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-56697`	vulnerable	2026-07-29 01:00:29.254593	Nuxt - Open Redirect via Protocol-Relative Paths in reloadNuxtApp MEDIUM (6.1) Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 accept protocol-relative paths such as //evil.com in the reloadNuxtApp function; these pass the script-protocol check but resolve to a cross-origin URL against the current page protocol. Attackers can inject paths like //evil.com to redirect users to attacker-controlled hosts, enabling phishing and OAuth authorization-code theft. Published: 2026-06-22T21:04:53.038Z Updated: 2026-06-23T13:51:01.421Z Open on db.gcve.eu Reference links https://github.com/nuxt/nuxt/security/advisories/GHSA-c9cv-mq2m-ppp3 https://github.com/nuxt/nuxt/commit/e447a793c47766834f7497f8412a76cd56fd8ee1 https://github.com/nuxt/nuxt/commit/6497d99dd106254abd089f6a263d7773869a343b https://www.vulncheck.com/advisories/nuxt-open-redirect-via-protocol-relative-paths-in-reloadnuxtapp	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-56326`	vulnerable	2026-07-29 01:00:29.092104	Nuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateTo MEDIUM (6.1) Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 contain a server-side open redirect vulnerability in navigateTo that fails to properly validate path-normalized payloads like /..//evil.com and /.//evil.com. Attackers can bypass external-host checks using path-normalization techniques to redirect users to attacker-controlled sites via the Location header or meta-refresh, enabling phishing and OAuth authorization-code theft. Published: 2026-06-22T21:04:50.975Z Updated: 2026-06-23T12:12:14.611Z Open on db.gcve.eu Reference links https://github.com/nuxt/nuxt/security/advisories/GHSA-c9cv-mq2m-ppp3 https://github.com/nuxt/nuxt/commit/2cce6fb02e621196d56df92e05594e07469b5a6d https://github.com/nuxt/nuxt/commit/1f2dd5e78c77576437138e97671965573c232835 https://www.vulncheck.com/advisories/nuxt-server-side-open-redirect-via-path-normalization-bypass-in-navigateto	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-34405`	vulnerable	2026-06-08 07:59:12.482912	Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes MEDIUM (6.1) Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a vulnerability that allows injection of arbitrary attributes into the HTML page body. This issue has been patched in version 6.2.5. Published: 2026-03-31T21:16:24.918Z Updated: 2026-04-01T18:43:23.097Z Open on db.gcve.eu Reference links https://github.com/nuxt-modules/og-image/security/advisories/GHSA-mg36-wvcr-m75h	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-34404`	vulnerable	2026-06-08 07:59:12.482433	Nuxt OG Image vulnerable to DoS via image generation Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a Denial of Service (DoS) vulnerability. The issue arises because there is no restriction on the width and height parameters of the generated image. The vulnerability was reproduced using the standard configuration and the default templates. This issue has been patched in version 6.2.5. Published: 2026-03-31T21:16:07.824Z Updated: 2026-04-01T13:37:28.025Z Open on db.gcve.eu Reference links https://github.com/nuxt-modules/og-image/security/advisories/GHSA-c7xp-q6q8-hg76	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.