Vulnerabilities in nuxt-modules

7 results

CVE-2025-24981CRITICALParsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdcEPSS 0.7%CVE-2026-61793MEDIUMNuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameterEPSS 0.5%CVE-2025-54075HIGHmdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)EPSS 0.3%CVE-2026-34404MEDIUMNuxt OG Image vulnerable to DoS via image generationEPSS 0.3%CVE-2026-34405MEDIUMNuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributesEPSS 0.2%CVE-2026-102527MEDIUMNuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routesEPSS 0.2%CVE-2026-44589LOWnuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)EPSS 0.2%