CVE-2026-43897
1 advisory.
npm/link-preview-js CVE-2026-43897: high
link-preview-js vulnerable to IPv6 and internal loopback attacks
Action: Upgrade link-preview-js to 4.0.1 or later.
npm i link-preview-js@4.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.1 | - |
Fixed versions
| 4.0.1 |
Sources
- osv: GHSA-4gp8-rjrq-ch6q
- https://github.com/OP-Engineering/link-preview-js/security/advisories/GHSA-4gp8-rjrq-ch6q
- https://nvd.nist.gov/vuln/detail/CVE-2026-43897
- https://github.com/OP-Engineering/link-preview-js/pull/179
- https://github.com/OP-Engineering/link-preview-js/commit/4396d48909fab37553c0e93e26447fe218363ede
- https://github.com/OP-Engineering/link-preview-js
- https://github.com/OP-Engineering/link-preview-js/releases/tag/4.0.1
CVE-2026-43897 · published · modified · JSON