{"action":"Upgrade nuxt-og-image to 6.4.9 or later.","affected":[{"fixed":"6.4.9","introduced":"6.2.5"}],"component":"nuxt-og-image","cve_ids":["CVE-2026-44589"],"ecosystem":"npm","epss":0.00171,"exploited":false,"fixed_versions":["6.4.9"],"ghsa_id":"GHSA-c2rm-g55x-8hr5","id":"tcs_01M5KFHGJ28KDSMM10QXYX5S4A","modified_at":"2026-05-16T00:06:28.251916Z","published_at":"2026-05-07T20:52:30Z","references":["https://osv.dev/vulnerability/GHSA-c2rm-g55x-8hr5","https://github.com/nuxt-modules/og-image/security/advisories/GHSA-c2rm-g55x-8hr5","https://nvd.nist.gov/vuln/detail/CVE-2026-44589","https://github.com/nuxt-modules/og-image"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-c2rm-g55x-8hr5","url":"https://osv.dev/vulnerability/GHSA-c2rm-g55x-8hr5"}],"summary":"nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)"}