Medium severity6.1NVD Advisory· Published Mar 31, 2026· Updated Apr 13, 2026
CVE-2026-34405
CVE-2026-34405
Description
Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a vulnerability that allows injection of arbitrary attributes into the HTML page body. This issue has been patched in version 6.2.5.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
nuxt-og-imagenpm | < 6.2.5 | 6.2.5 |
Affected products
2Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-mg36-wvcr-m75hghsaADVISORY
- github.com/nuxt-modules/og-image/security/advisories/GHSA-mg36-wvcr-m75hnvdVendor AdvisoryExploitWEB
- nvd.nist.gov/vuln/detail/CVE-2026-34405ghsaADVISORY
News mentions
0No linked articles in our index yet.