Descripción
Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl() denylist introduced in nuxt-og-image@6.2.5 to remediate GHSA-pqhr-mp3f-hrpp (Dmitry Prokhorov / Positive Technologies, March 2026) is incomplete. It has an incomplete IPv6 prefix list and is missing redirect re-validation. This vulnerability is fixed in 6.4.9.
CVSS 3.7EPSS 0.17099999999999999%Riesgo 0.38
Ver fuente- Publicación
- 2026-05-14 19:16:38
- Versiones afectadas
- >=6.2.5,<6.4.9
- Tipo
- Package
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N