unstale

npm / nuxt-og-image

nuxt-og-image

What changed in nuxt-og-image 6 to 7, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.

7 security3 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli on npm

nuxt-og-image 74 changes

Security 1

  • Enforces WOFF allocation bounds when handling fonts.

    7.0.5release notes

Fixes and other changes 3

nuxt-og-image 66 changes

Security 6

  • Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes

    6.7.0security advisory

  • Nuxt OG Image has unauthenticated SSRF via fonts[].path URL parameter

    6.7.0security advisory

  • nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)

    6.4.9security advisory

  • Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions

    6.2.5security advisory

  • Nuxt OG Image is vulnerable to reflected XSS via query parameter injection into HTML attributes

    6.2.5security advisory

  • Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters

    6.2.5security advisory