Op-Engineering

2 CVEs in 1 Op-Engineering product, including Link-Preview-Js. Newest: CVE-2026-61704 (2026-08-20). Severity, EPSS and public exploits for each.

Op-Engineering products with known CVEs

ProductCVEs
Link-Preview-Js2
Op-Engineering CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61704High7.52026-08-20Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the ori…
CVE-2026-438972026-05-11Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was also a DNS attack, where an addr…