thoda-dev vulnerabilities (CVE)

CVE records published for thoda-dev, newest first. Follow to get an email when a new one appears.

1 results

7.5High

CVE-2026-59158 14 days ago

Nuxt Ollama: public runtime configuration discloses the configured cloud API key

thoda-dev nuxt-ollama

Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, `src/module.ts` unconditionally merges all module options, including a configured cloud `api_key`, into `runtimeConfig.public.ollama`. Nuxt serializes this p…