Approved changes feed: RSS · Atom

cpe:2.3:a:op-engineering:link-preview-js:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOp Engineering (3d1d587d-5cb2-5aa7-b700-62b53498a25b)
ProductLink Preview Js (205d2a80-7de9-5b19-b227-12cf22fc0e47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-43897 vulnerable 2026-06-08 08:03:17.990654 Link Preview JS: vunerable to IPv6 and internal loopback attacks
Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was also a DNS attack, where an address could be resolved into an internal IP. This could cause internal data leaks. This vulnerability is fixed in 4.0.1.
Published: 2026-05-11T21:14:40.495Z
Updated: 2026-05-12T16:40:05.641Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.