Read the docs

Link-preview-js Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Link-preview-js Project records in CISA KEV

No Link-preview-js Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Link-preview-js 1 record LOW

Records

1 record in Link-preview-js · all components

TI-2022-09437 CVE-2022-25876 · GHSA-h9cw-7g8j-h66h

Server-side request forgery (SSRF) in link-preview-js

Priority LOW 28

The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00368 Published 2022-07-01 Fixed in 2.1.16, 2.1.17 CWE-918
Open these records in search →