Nuxt-modules vulnerabilities
We track 3 vulnerabilities in Nuxt-modules products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2026.
Latest Nuxt-modules vulnerabilities
- 7.5 High severity
og-image: Uncontrolled Resource Consumption
Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older versions, /og-image/) contains a Denial of Service (DoS) vulnerability. The issue arises because there is no
- 8.3 High severity
mdc: Improper Neutralization of Input During Web Page Generation
MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion / stored cross-site scripting vulnerability in @nuxtjs/mdc lets a Markdown author inject a `<base href="https
- 9.3 Critical severity
mdc: Improper Neutralization of Input During Web Page Generation
MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the `java