https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T17:15:59.828280+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-180989 EUVD-2026-180989 2026-10-18T17:15:59.831109+00:00 EUVD-2026-180989 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25876 fkie_cve-2022-25876 2026-10-18T17:15:59.831140+00:00

The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection.

 https://cve.radiocsirt.org/vuln/ghsa-h9cw-7g8j-h66h GHSA-h9cw-7g8j-h66h — Server-Side Request Forgery in link-preview-js 2026-10-18T17:15:59.831169+00:00

Affected: npm: link-preview-js

The package link-preview-js before 2.1.17 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection.

 https://cve.radiocsirt.org/vuln/gsd-2022-25876 gsd-2022-25876 2026-10-18T17:15:59.831193+00:00 gsd-2022-25876