https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:07:16 +0000 https://db.gcve.eu/vuln/cve-2026-34404 <p><strong>Affected:</strong> nuxt-modules og-image</p> <p>Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a Denial of Service (DoS) vulnerability. The issue arises because there is no restriction on the width and height parameters of the generated image. The vulnerability was reproduced using the standard configuration and the default templates. This issue has been patched in version 6.2.5.</p> <p><strong>Affected:</strong> nuxt-modules og-image</p> <p>Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a Denial of Service (DoS) vulnerability. The issue arises because there is no restriction on the width and height parameters of the generated image. The vulnerability was reproduced using the standard configuration and the default templates. This issue has been patched in version 6.2.5.</p> https://db.gcve.eu/vuln/cve-2026-34404 https://db.gcve.eu/vuln/ghsa-c7xp-q6q8-hg76 <p><strong>Affected:</strong> npm: nuxt-og-image</p> <p>**Product:** Nuxt OG Image **Version:** 6.1.2 **CWE-ID:** [CWE-404](https://cwe.mitre.org/data/definitions/404.html): Improper Resource Shutdown or Release **Description:** Failure to limit the length and width of the generated image results in a denial of service. **Impact:** Denial of service **Exploitation condition:** An external user **Mitigation:** Implement a limitation on the width and length of the generated image. **Researcher:** Dmitry Prokhorov (Positive Technologies)</p> <p>## Research During the analysis of the nuxt-og-image package, which is shipped with the nuxt-seo package, a zero‑day vulnerability was discovered. This research revealed that the image‑generation component by the URI: `/_og/d/` (and, in older versions, `/og-image/`) contains a Denial of Service (DoS) vulnerability. The issue arises because there is no restriction on the width and height parameters of the generated image. The vulnerability was reproduced using the standard configuration and the default templates.</p> <p>_Listing 1. The content of the configuration file `nuxt.config.ts`_ ``` export default defineNuxtConfig({ modules: [&#39;nuxt-og-image&#39;], devServer: { host: &#39;web-test.local&#39;, port: 3000 }, site: { url: &#39;http://web-test.local:3000&#39;, }, ogImage: { fonts: [ &#39;Inter:400&#39;, &#39;Inter:700&#39; ], } }) ```</p> <p>## Vulnerability reproduction To demonstrate the proof‑of‑concept, a request should be sent with the increased `width` and `height` parameters. This will c…</p> <p><strong>Affected:</strong> npm: nuxt-og-image</p> <p>**Product:** Nuxt OG Image **Version:** 6.1.2 **CWE-ID:** [CWE-404](https://cwe.mitre.org/data/definitions/404.html): Improper Resource Shutdown or Release **Description:** Failure to limit the length and width of the generated image results in a denial of service. **Impact:** Denial of service **Exploitation condition:** An external user **Mitigation:** Implement a limitation on the width and length of the generated image. **Researcher:** Dmitry Prokhorov (Positive Technologies)</p> <p>## Research During the analysis of the nuxt-og-image package, which is shipped with the nuxt-seo package, a zero‑day vulnerability was discovered. This research revealed that the image‑generation component by the URI: `/_og/d/` (and, in older versions, `/og-image/`) contains a Denial of Service (DoS) vulnerability. The issue arises because there is no restriction on the width and height parameters of the generated image. The vulnerability was reproduced using the standard configuration and the default templates.</p> <p>_Listing 1. The content of the configuration file `nuxt.config.ts`_ ``` export default defineNuxtConfig({ modules: [&#39;nuxt-og-image&#39;], devServer: { host: &#39;web-test.local&#39;, port: 3000 }, site: { url: &#39;http://web-test.local:3000&#39;, }, ogImage: { fonts: [ &#39;Inter:400&#39;, &#39;Inter:700&#39; ], } }) ```</p> <p>## Vulnerability reproduction To demonstrate the proof‑of‑concept, a request should be sent with the increased `width` and `height` parameters. This will c…</p> https://db.gcve.eu/vuln/ghsa-c7xp-q6q8-hg76