nuxt-og-image
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes | nuxt-og-image | npm | Medium | Fix reported | |
| Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter | nuxt-og-image | npm | Medium | Fix reported | |
| nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect) | nuxt-og-image | npm | Low | Fix reported | |
| Nuxt OG Image is vulnerable to reflected XSS via query parameter injection into HTML attributes | nuxt-og-image | npm | Medium | Fix reported | |
| Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions | nuxt-og-image | npm | Medium | Fix reported | |
| Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters | nuxt-og-image | npm | Medium | Fix reported |