link-preview-js vulnerabilities

CVEs whose affected-version data names the link-preview-js package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61704High· 7.5

1mo ago

Link Preview JS extracts web links information

Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public …

▾ Twilightlink-preview-js · link-preview-jsEPSS 0.40%via NVD