Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a vulnerability that allows injection of arbitrary attributes into the HTML page body. This issue has been patched in version 6.2.5.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34405 Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-… https://www.cve.org/CVERecord?id=CVE-2026-34405
Post summary
The post discusses a CVE affecting Nuxt's OG image generation before v6.2.5, notes a fix in newer releases, but provides no proof of exploitation or PoC.
CVE-2026-34405 Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34405
Post summary
CVE-2026-34405 is a disclosed vulnerability affecting Nuxt OG Image before version 6.2.5, with details pointed to a Vulmon page; no proof of concept, exploit code, or active exploitation is reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nuxt | og_image | - | node.js | - |