thoda-dev vulnerabilities

Products

• nuxt-ollama 1

Latest thoda-dev CVEs

Newest publication first

1. CVE-2026-59158 Nuxt Ollama: public runtime configuration discloses the configured cloud API key

   Published 2026-10-27

   High·CVSS 7.5

   Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, src/module.ts unconditionally merges all module options, including a configured cloud api_key, into runtimeConfig.public.ollama. Nuxt serializes this public configuration into th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.