https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T05:45:31.168844+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-34405 CVE-2026-34405 — Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes 2026-10-02T05:45:31.182409+00:00

Affected: nuxt-modules og-image

Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a vulnerability that allows injection of arbitrary attributes into the HTML page body. This issue has been patched in version 6.2.5.