CVE-2026-61793
1 advisory.
npm/nuxt-og-image CVE-2026-61793: medium
Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter
Action: Upgrade nuxt-og-image to 6.7.0 or later.
npm i nuxt-og-image@6.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.2 | 6.7.0 | - |
Fixed versions
| 6.7.0 |
Sources
- osv: GHSA-q8hw-4fvp-9rwv
- https://github.com/nuxt-modules/og-image/security/advisories/GHSA-q8hw-4fvp-9rwv
- https://github.com/nuxt-modules/og-image/pull/637
- https://github.com/nuxt-modules/og-image/commit/243cac2228671d3711c2bd65e300c278fcdf5a4e
- https://github.com/nuxt-modules/og-image
- https://github.com/nuxt-modules/og-image/releases/tag/v6.7.0
CVE-2026-61793 · published · modified · JSON