npm/nuxt-og-image CVE-2026-102527: medium 6.9
Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes
Action: Upgrade nuxt-og-image to 6.7.0 or later.
npm i nuxt-og-image@6.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.5 | 6.7.0 | - |
Fixed versions
| 6.7.0 |
Sources
- osv: GHSA-2x6f-rp82-ppmj
- nvd: CVE-2026-102527
- https://github.com/nuxt-modules/og-image/security/advisories/GHSA-2x6f-rp82-ppmj
- https://github.com/nuxt-modules/og-image/pull/638
- https://github.com/nuxt-modules/og-image/commit/e6c5b53ce7f434ab8cbc91298dccfb2b515c56a5
- https://github.com/nuxt-modules/og-image
- https://github.com/nuxt-modules/og-image/releases/tag/v6.7.0
CVE-2026-102527 · published · modified · JSON