[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"github-release-nuxt-image-v1.11.2":3,"$f2v3tzw7dti6zg":-1},{"adjacent":4,"latestReleases":12,"relatedArticles":22,"relatedArticlesAreVersioned":9,"release":23},{"newer":5,"older":6},null,{"htmlUrl":7,"id":8,"isPrerelease":9,"name":10,"publishedAt":11,"tagName":10},"https:\u002F\u002Fgithub.com\u002Fnuxt\u002Fimage\u002Freleases\u002Ftag\u002Fv2.2.1","01a18e65-f107-77e0-b286-297eb0a918a5",false,"v2.2.1","2026-10-30T16:52:38.000Z",[13,14,18],{"id":8,"isPrerelease":9,"name":10,"publishedAt":11,"tagName":10},{"id":15,"isPrerelease":9,"name":16,"publishedAt":17,"tagName":16},"01a155bf-f85e-72f7-aba7-cfa8b73ddd10","v2.2.0","2026-10-19T17:19:07.000Z",{"id":19,"isPrerelease":9,"name":20,"publishedAt":21,"tagName":20},"019faa50-2457-7760-a752-885324f28569","v2.1.0","2026-07-28T17:45:49.000Z",[],{"htmlUrl":24,"id":25,"isPrerelease":9,"name":26,"projectId":27,"projectName":28,"projectOwner":29,"projectRepo":30,"projectUrl":31,"publishedAt":32,"summary":33,"tagName":26,"updatedAt":34,"breakingChangesHtml":5,"displayName":35,"hasBreakingChanges":9,"indexable":36,"notesHtml":37,"version":38},"https:\u002F\u002Fgithub.com\u002Fnuxt\u002Fimage\u002Freleases\u002Ftag\u002Fv1.11.2","01a18e65-f111-750a-a9f3-44b0155c20e9","v1.11.2","019d75af-fb33-76be-ad0d-a4fd7f8df6f9","Nuxt Image","nuxt","image","https:\u002F\u002Fgithub.com\u002Fnuxt\u002Fimage","2026-10-30T17:02:22.000Z","This security release (v1.11.2) addresses a vulnerability in the `\u002F_ipx` image transformation route, requiring `ipx ^2.1.2` to prevent integer overflow issues when decoding multi-page images. Developers should ensure they have the patched version of `ipx` installed to mitigate potential risks.","2026-10-30T20:00:29.115Z","Nuxt Image v1.11.2",true,"\u003Cblockquote>\n\u003Cp>v1.11.1 is a security release.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>🚨 Security release\u003C\u002Fh3>\n\u003Cp>This release fixes a vulnerability in the \u003Ccode>\u002F_ipx\u003C\u002Fcode> image transformation route. \u003Ccode>ipx\u003C\u002Fcode> was affected by an integer overflow when decoding a multi-page image, so a crafted source image could corrupt memory in the server process with a single unauthenticated request (\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Funjs\u002Fipx\u002Fsecurity\u002Fadvisories\u002FGHSA-qf89-6xm4-66wm\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">GHSA-qf89-6xm4-66wm\u003C\u002Fa>; our advisory for the \u003Ccode>@nuxt\u002Fimage\u003C\u002Fcode> side is \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnuxt\u002Fimage\u002Fsecurity\u002Fadvisories\u002FGHSA-p5vf-pjf5-ggj3\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">GHSA-p5vf-pjf5-ggj3\u003C\u002Fa>). Sites where an attacker cannot control any image source are not affected.\u003C\u002Fp>\n\u003Cp>\u003Ccode>@nuxt\u002Fimage\u003C\u002Fcode> now requires \u003Ccode>ipx ^2.1.2\u003C\u002Fcode>, which rejects oversized multi-page images with a \u003Ccode>400\u003C\u002Fcode> before decoding them. \u003Ccode>ipx\u003C\u002Fcode> is an optional dependency, so after upgrading run \u003Ccode>npm ls ipx\u003C\u002Fcode> to confirm a patched version resolves.\u003C\u002Fp>\n\u003Cp>Input formats are unchanged on this release line; the mitigation is the \u003Ccode>ipx\u003C\u002Fcode> upgrade itself.\u003C\u002Fp>\n\u003Ch2>👉 Changelog\u003C\u002Fh2>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnuxt\u002Fimage\u002Fcompare\u002Fv2.2.0...v1.11.1\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">compare changes\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>🩹 Fixes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>ipx:\u003C\u002Fstrong> require patched ipx for \u002F_ipx route (GHSA-p5vf-pjf5-ggj3) (\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnuxt\u002Fimage\u002Fcommit\u002Ff105285\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">\u003Ccode>f105285\u003C\u002Fcode>\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>build:\u003C\u002Fstrong> run nuxt-module-build prepare in prepack (\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnuxt\u002Fimage\u002Fcommit\u002F110bbe3\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">\u003Ccode>110bbe3\u003C\u002Fcode>\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🤖 CI\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>automate 1.x releases with uppt (\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnuxt\u002Fimage\u002Fcommit\u002Fbb9669a\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">\u003Ccode>bb9669a\u003C\u002Fcode>\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>❤️ Contributors\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Daniel Roe (@danielroe)\u003C\u002Fli>\n\u003C\u002Ful>\n","1.11.2"]