Product by Follow-redirects Project
Follow-redirects
4 known vulnerabilities in Follow-redirects (Follow-redirects Project), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-0155 | Follow-redirects/follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor | 8.0 | |
| Medium | CVE-2024-28849 | Proxy-Authorization header kept across hosts in follow-redirects | 6.5 | |
| High | CVE-2026-40895 | follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets | 7.5 | |
| Medium | CVE-2022-0536 | Follow-redirects/follow-redirects: Improper Removal of Sensitive Information Before Storage or Transfer | 2.6 |