OP-Engineering vulnerabilities

🔔 Create alert RSS

Published CVEs affecting OP-Engineering products: 1 record(s), with severity, exploitation and fixes.

Link-preview-js 1

Exploited only (KEV) →

CVE-2026-43897 High · 8.7 CWE-918 May 11, 2026

Link Preview JS: vunerable to IPv6 and internal loopback attacks

Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was also a DNS attack, where an address could be resolved into an internal IP. This could cause internal data leaks. This vulnerability is fixed in 4.0.1.