Denial of Service Vulnerability in Nuxt OG Image by Nuxt
CVE-2026-34404

6.9MEDIUM

Key Information:

Vendor

Nuxt-modules

Status
Og-image
Vendor
CVE Published:
31 March 2026

What is CVE-2026-34404?

The Nuxt OG Image module allows for the generation of Open Graph images using Vue templates. Prior to the release of version 6.2.5, a vulnerability existed within the image-generation component, specifically at the URI: /_og/d/ and in older versions, /og-image/. This vulnerability arises from the absence of restrictions on the width and height parameters of the generated images, which could be exploited to trigger a Denial of Service (DoS). This issue has been addressed in version 6.2.5, and it is recommended that users upgrade to this version or later to mitigate potential risks.

Affected Version(s)

og-image < 6.2.5

References

https://github.com/nuxt-modules/og-image/security/advisor...
x_refsource_CONFIRM

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.