Description
Product: Nuxt OG Image Version: < 6.2.5 CWE-ID: CWE-918: Server-Side Request Forgery
Recommendation
Update the nuxt-og-image package to the latest compatible version. Followings are version details:
- Affected version(s): < 6.2.5
- Patched version(s): 6.2.5
References
Could your website be exposed too?
SmartScanner can check your website for Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter - CVE-2025-58179
- lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability - CVE-2024-32964
- @lobehub/chat Server Side Request Forgery vulnerability - CVE-2024-32965
- HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis - CVE-2026-46391
You might also like:
See something that needs correcting? Let us knowUpdated March 31, 2026


