follow-redirects vulnerabilities (npm)
8 vulnerabilities.
-
follow-redirectsnpm follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects 5.9 Medium -
follow-redirectsnpm follow-redirects array-form headers bypass cross-origin credential stripping 8.2 High -
follow-redirectsnpm follow-redirects sensitiveHeaders regex escaping can expose credential headers 8.2 High -
follow-redirectsnpm follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets 6.9 Medium -
follow-redirectsnpm Proxy-Authorization header kept across hosts in follow-redirects 6.5 Medium -
follow-redirectsnpm Follow Redirects improperly handles URLs in the url.parse() function 7.3 High -
follow-redirectsnpm Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects 2.6 Low -
follow-redirectsnpm Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 8.0 High