CVE-2026-44589
Low · 3.7CVSS
3.7
EPSS
0.3%
Published
May 14, 2026
CISA due date
—
The record
Nuxt OG Image generates OG Images with Vue templates in Nuxt. The isBlockedUrl() denylist introduced in nuxt-og-image@6.2.5 to remediate GHSA-pqhr-mp3f-hrpp (Dmitry Prokhorov / Positive Technologies, March 2026) is incomplete. It has an incomplete IPv6 prefix list and is missing redirect re-validation. This vulnerability is fixed in 6.4.9.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | nuxt-og-image | 6.2.5 | 6.4.9 |
Related vulnerabilities
- GHSA-c2rm-g55x-8hr5 nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect) Same vulnerability
- GHSA-mg36-wvcr-m75h Nuxt OG Image is vulnerable to reflected XSS via query parameter injection into HTML… Also affects nuxt-og-image
- GHSA-pqhr-mp3f-hrpp Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters Also affects nuxt-og-image
- GHSA-c7xp-q6q8-hg76 Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions Also affects nuxt-og-image
- CVE-2026-34404 Nuxt OG Image generates OG Images with Vue templates in Nuxt. Also affects nuxt-og-image
- CVE-2026-34405 Nuxt OG Image generates OG Images with Vue templates in Nuxt. Also affects nuxt-og-image
- CVE-2026-114730 Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a… CWE-918
- CVE-2026-87953 Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider… CWE-918