---
title: "Nuxt Image v1.11.2 Release Notes | VueDigest"
description: "This security release (v1.11.2) addresses a vulnerability in the `/_ipx` image transformation route, requiring `ipx ^2.1.2` to prevent integer overflow …"
canonical_url: "https://vuedigest.com/github-releases/nuxt/image/v1.11.2"
meta:
  "og:description": "This security release (v1.11.2) addresses a vulnerability in the `/_ipx` image transformation route, requiring `ipx ^2.1.2` to prevent integer overflow …"
  "og:image": "https://vuedigest.com/_og/d/c_Template.takumi%2Cdescription_~VGhpcyBzZWN1cml0eSByZWxlYXNlICh2MS4xMS4yKSBhZGRyZXNzZXMgYSB2dWxuZXJhYmlsaXR5IGluIHRoZSBgL19pcHhgIGltYWdlIHRyYW5zZm9ybWF0aW9uIHJvdXRlLCByZXF1aXJpbmcgYGlweCBeMi4xLjJgIHRvIHByZXZlbnQgaW50ZWdlciBvdmVyZmxvdyDigKY%2Ctitle_Nuxt%2BImage%2Bv1.11.2%2Cp_Ii9naXRodWItcmVsZWFzZXMvbnV4dC9pbWFnZS92MS4xMS4yIg%2Cs_xONNNTXHnSh9OEyP.png"
  "og:image:height": "600"
  "og:image:type": image/png
  "og:image:width": "1200"
  "og:title": "Nuxt Image v1.11.2 Release Notes"
  "twitter:description": "This security release (v1.11.2) addresses a vulnerability in the `/_ipx` image transformation route, requiring `ipx ^2.1.2` to prevent integer overflow …"
  "twitter:image": "https://vuedigest.com/_og/d/c_Template.takumi%2Cdescription_~VGhpcyBzZWN1cml0eSByZWxlYXNlICh2MS4xMS4yKSBhZGRyZXNzZXMgYSB2dWxuZXJhYmlsaXR5IGluIHRoZSBgL19pcHhgIGltYWdlIHRyYW5zZm9ybWF0aW9uIHJvdXRlLCByZXF1aXJpbmcgYGlweCBeMi4xLjJgIHRvIHByZXZlbnQgaW50ZWdlciBvdmVyZmxvdyDigKY%2Ctitle_Nuxt%2BImage%2Bv1.11.2%2Cp_Ii9naXRodWItcmVsZWFzZXMvbnV4dC9pbWFnZS92MS4xMS4yIg%2Cs_xONNNTXHnSh9OEyP.png"
  "twitter:title": "Nuxt Image v1.11.2 Release Notes"
---

> Index of every page on this site: [llms.txt](https://vuedigest.com/llms.txt)

# **Nuxt Image v1.11.2**

[View on GitHub](https://github.com/nuxt/image/releases/tag/v1.11.2)

nuxt/image· Released October 30, 2026

Share [Share on X](https://x.com/intent/tweet?text=Nuxt+Image+v1.11.2&url=https%3A%2F%2Fvuedigest.com%2Fgithub-releases%2Fnuxt%2Fimage%2Fv1.11.2)

**Summary**

This security release (v1.11.2) addresses a vulnerability in the \`/\_ipx\` image transformation route, requiring \`ipx ^2.1.2\` to prevent integer overflow issues when decoding multi-page images. Developers should ensure they have the patched version of \`ipx\` installed to mitigate potential risks.

## **Full release notes **

> v1.11.1 is a security release.

### 🚨 Security release

This release fixes a vulnerability in the `/_ipx` image transformation route. `ipx` was affected by an integer overflow when decoding a multi-page image, so a crafted source image could corrupt memory in the server process with a single unauthenticated request ([GHSA-qf89-6xm4-66wm](https://github.com/unjs/ipx/security/advisories/GHSA-qf89-6xm4-66wm); our advisory for the `@nuxt/image` side is [GHSA-p5vf-pjf5-ggj3](https://github.com/nuxt/image/security/advisories/GHSA-p5vf-pjf5-ggj3)). Sites where an attacker cannot control any image source are not affected.

`@nuxt/image` now requires `ipx ^2.1.2`, which rejects oversized multi-page images with a `400` before decoding them. `ipx` is an optional dependency, so after upgrading run `npm ls ipx` to confirm a patched version resolves.

Input formats are unchanged on this release line; the mitigation is the `ipx` upgrade itself.

## 👉 Changelog

[compare changes](https://github.com/nuxt/image/compare/v2.2.0...v1.11.1)

### 🩹 Fixes

- **ipx:** require patched ipx for /\_ipx route (GHSA-p5vf-pjf5-ggj3) ([`f105285`](https://github.com/nuxt/image/commit/f105285))
- **build:** run nuxt-module-build prepare in prepack ([`110bbe3`](https://github.com/nuxt/image/commit/110bbe3))

### 🤖 CI

- automate 1.x releases with uppt ([`bb9669a`](https://github.com/nuxt/image/commit/bb9669a))

### ❤️ Contributors

- Daniel Roe (@danielroe)

## **Latest Nuxt Image releases **

[All releases](https://vuedigest.com/github-releases/nuxt/image)

- [**v2.2.1**October 30, 2026](https://vuedigest.com/github-releases/nuxt/image/v2.2.1)
- [**v2.2.0**October 19, 2026](https://vuedigest.com/github-releases/nuxt/image/v2.2.0)
- [**v2.1.0**July 28, 2026](https://vuedigest.com/github-releases/nuxt/image/v2.1.0)

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://vuedigest.com/#website","@type":"WebSite","description":"Your daily dose of Vue.js and Nuxt news. Curated articles, tutorials, and updates from the Vue ecosystem.","inLanguage":"en","name":"VueDigest","url":"https://vuedigest.com","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://vuedigest.com/news?search={search_term_string}"},"query-input":"required name=search_term_string"}],"publisher":{"@id":"https://vuedigest.com/#identity"}},{"@id":"https://vuedigest.com/github-releases/nuxt/image/v1.11.2#webpage","@type":"WebPage","dateModified":"2026-10-30T20:00:29.115Z","datePublished":"2026-10-30T17:02:22.000Z","description":"This security release (v1.11.2) addresses a vulnerability in the `/_ipx` image transformation route, requiring `ipx ^2.1.2` to prevent integer overflow …","name":"Nuxt Image v1.11.2 Release Notes","url":"https://vuedigest.com/github-releases/nuxt/image/v1.11.2","breadcrumb":{"@id":"https://vuedigest.com/github-releases/nuxt/image/v1.11.2#breadcrumb"},"isPartOf":{"@id":"https://vuedigest.com/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://vuedigest.com/github-releases/nuxt/image/v1.11.2"]}],"primaryImageOfPage":{"@id":"https://vuedigest.com/#logo"}},{"@id":"https://vuedigest.com/#identity","@type":"Organization","name":"VueDigest","url":"https://vuedigest.com","logo":{"@id":"https://vuedigest.com/#logo"}},{"@id":"https://vuedigest.com/github-releases/nuxt/image/v1.11.2#article","about":"Nuxt Image 1.11.2","dateModified":"2026-10-30T20:00:29.115Z","datePublished":"2026-10-30T17:02:22.000Z","description":"This security release (v1.11.2) addresses a vulnerability in the `/_ipx` image transformation route, requiring `ipx ^2.1.2` to prevent integer overflow …","headline":"Nuxt Image v1.11.2 Release Notes","inLanguage":"en","thumbnailUrl":"https://vuedigest.com/_og/d/c_Template.takumi%2Cdescription_~VGhpcyBzZWN1cml0eSByZWxlYXNlICh2MS4xMS4yKSBhZGRyZXNzZXMgYSB2dWxuZXJhYmlsaXR5IGluIHRoZSBgL19pcHhgIGltYWdlIHRyYW5zZm9ybWF0aW9uIHJvdXRlLCByZXF1aXJpbmcgYGlweCBeMi4xLjJgIHRvIHByZXZlbnQgaW50ZWdlciBvdmVyZmxvdyDigKY%2Ctitle_Nuxt%2BImage%2Bv1.11.2%2Cp_Ii9naXRodWItcmVsZWFzZXMvbnV4dC9pbWFnZS92MS4xMS4yIg%2Cs_xONNNTXHnSh9OEyP.png","@type":["Article","TechArticle"],"author":{"@id":"https://vuedigest.com/#identity"},"image":{"@id":"https://vuedigest.com/#/schema/image/1"},"isPartOf":{"@id":"https://vuedigest.com/github-releases/nuxt/image/v1.11.2#webpage"},"keywords":["Nuxt Image","release notes","changelog"],"mainEntityOfPage":{"@id":"https://vuedigest.com/github-releases/nuxt/image/v1.11.2#webpage"},"publisher":{"@id":"https://vuedigest.com/#identity"}},{"@id":"https://vuedigest.com/github-releases/nuxt/image/v1.11.2#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","item":"https://vuedigest.com/github-releases","name":"GitHub Releases","position":1},{"@type":"ListItem","item":"https://vuedigest.com/github-releases/nuxt/image","name":"Nuxt Image","position":2},{"@type":"ListItem","name":"v1.11.2","position":3}]},{"@id":"https://vuedigest.com/#logo","@type":"ImageObject","caption":"VueDigest","contentUrl":"https://mokkapps.twic.pics/vuedigest.com/logo.png","inLanguage":"en","url":"https://mokkapps.twic.pics/vuedigest.com/logo.png"},{"@id":"https://vuedigest.com/#/schema/image/1","@type":"ImageObject","contentUrl":"https://vuedigest.com/_og/d/c_Template.takumi%2Cdescription_~VGhpcyBzZWN1cml0eSByZWxlYXNlICh2MS4xMS4yKSBhZGRyZXNzZXMgYSB2dWxuZXJhYmlsaXR5IGluIHRoZSBgL19pcHhgIGltYWdlIHRyYW5zZm9ybWF0aW9uIHJvdXRlLCByZXF1aXJpbmcgYGlweCBeMi4xLjJgIHRvIHByZXZlbnQgaW50ZWdlciBvdmVyZmxvdyDigKY%2Ctitle_Nuxt%2BImage%2Bv1.11.2%2Cp_Ii9naXRodWItcmVsZWFzZXMvbnV4dC9pbWFnZS92MS4xMS4yIg%2Cs_xONNNTXHnSh9OEyP.png","inLanguage":"en","url":"https://vuedigest.com/_og/d/c_Template.takumi%2Cdescription_~VGhpcyBzZWN1cml0eSByZWxlYXNlICh2MS4xMS4yKSBhZGRyZXNzZXMgYSB2dWxuZXJhYmlsaXR5IGluIHRoZSBgL19pcHhgIGltYWdlIHRyYW5zZm9ybWF0aW9uIHJvdXRlLCByZXF1aXJpbmcgYGlweCBeMi4xLjJgIHRvIHByZXZlbnQgaW50ZWdlciBvdmVyZmxvdyDigKY%2Ctitle_Nuxt%2BImage%2Bv1.11.2%2Cp_Ii9naXRodWItcmVsZWFzZXMvbnV4dC9pbWFnZS92MS4xMS4yIg%2Cs_xONNNTXHnSh9OEyP.png"}]}
```

## Sitemap

See the full [sitemap](https://vuedigest.com/sitemap.md) for all pages.