Vendor

    Follow-redirects

    8 known vulnerabilities in products by Follow-redirects, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Follow-redirects
    HighCVE-2022-0155

    Follow-redirects/follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor

    also in 2 other products

    		8.0
    HighCVE-2026-111756

    follow-redirects array-form headers bypass cross-origin credential stripping

    		—
    HighCVE-2026-111755

    follow-redirects sensitiveHeaders regex escaping can expose credential headers

    		—
    MediumCVE-2024-28849

    Proxy-Authorization header kept across hosts in follow-redirects

    also in 3 other products

    		6.5
    HighCVE-2026-40895

    follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

    also in 2 other products

    		7.5
    HighCVE-2023-26159

    Follow-redirects: Improper Input Validation

    		7.3
    MediumCVE-2026-116689

    Follow-redirects: Insertion of Sensitive Information Into Sent Data

    		5.9
    MediumCVE-2022-0536

    Follow-redirects/follow-redirects: Improper Removal of Sensitive Information Before Storage or Transfer

    also in 2 other products

    		2.6

    Products

    Products by Follow-redirects
    Follow-redirects60