follow-redirects vulnerabilities (Root)
4 vulnerabilities.
-
follow-redirectsRoot follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects 5.9 Medium -
follow-redirectsRoot follow-redirects array-form headers bypass cross-origin credential stripping 8.2 High -
follow-redirectsRoot follow-redirects sensitiveHeaders regex escaping can expose credential headers 8.2 High -
follow-redirectsRoot follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets 6.9 Medium