CVE-2026-34405 in og-image

Sumário (Inglês)

Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a vulnerability that allows injection of arbitrary attributes into the HTML page body. This issue has been patched in version 6.2.5.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsável

GitHub_M

Reservar

27/03/2026

Divulgação

01/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354576	nuxt-modules og-image d Script de Site Cruzado	79	Não definido	Correção oficial	CVE-2026-34405

Fontes

• MITRE
• NVD
• CVE Details