nuxt-ollama vulnerabilities

CVEs whose affected-version data names the nuxt-ollama package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59158High· 7.5

2d ago

Nuxt Ollama: public runtime configuration discloses the configured cloud API key

Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, `src/module.ts` unconditionally merges all module options, including a configured cloud `api_key`, into `runtimeConfig.public.ollama`. …

▾ Twilightthoda-dev · nuxt-ollamavia CVEORG