Vulnerabilities in nuxt-modules

5 results

CVE-2025-24981CRITICALParsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdcEPSS 0.6%CVE-2026-34404MEDIUMNuxt OG Image vulnerable to DoS via image generationEPSS 0.3%CVE-2025-54075HIGHmdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)EPSS 0.3%CVE-2026-34405MEDIUMNuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributesEPSS 0.2%CVE-2026-44589LOWnuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)EPSS 0.2%