Skip to contentFollow-redirects Follow-redirects vulnerabilities
- follow-redirectsfollow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirectsCVE-2026-116689Fix available5.9 Medium
- follow-redirectsfollow-redirects array-form headers bypass cross-origin credential strippingCVE-2026-111756Fix available8.2 High
- follow-redirectsfollow-redirects sensitiveHeaders regex escaping can expose credential headersCVE-2026-111755Fix available8.2 High
- follow-redirects, red hat cluster observability operator 1.5.0, cryostat 4 +79 more +81 morefollow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect TargetsCVE-2026-40895Fix available6.9 Medium
- follow-redirectsProxy-Authorization header kept across hosts in follow-redirectsCVE-2024-28849Fix available6.5 Medium
- follow-redirects, follow-redirects follow redirects +1 moreFollow Redirects improperly handles URLs in the url.parse() functionCVE-2023-26159Fix available7.3 High
- follow-redirects follow-redirects/follow-redirects, follow-redirects project follow-redirects +1 moreImproper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirectsCVE-2022-0536Fix available2.6 Low
- follow-redirects follow-redirects/follow-redirects, follow-redirects project follow-redirects, siemens sinec ins +2 moreExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirectsCVE-2022-0155Public exploitFix available8.0 High