nuxt-modules CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM nuxt-modules CVE published 2026-10-15

CVE-2026-102527

CVE-2026-102527: Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes. The vulnerability allows an unauthenticated attacker to modify the content of the image delivered to the user due to specifics in caching and key generation in the Open Graph image cache. This issue affects version 6.2.5 of Nuxt OG Image and can be mitigated by upgrading to version 6.7.2 and setti [truncated]