Vendor

follow-redirects

7 known vulnerabilities.

Products

follow-redirects 5 follow-redirects/follow-redirects 2

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.2

CVE-2026-111756

follow-redirects array-form headers bypass cross-origin credential stripping

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive credential headers (Authorization, Proxy-Authorization, Cookie, and any caller-d…

follow-redirects follow-redirects langfuse-3-worker prism Debian Ubuntu Azure Linux Wolfi npm

Oct 20, 2026
High 8.2

CVE-2026-111755

follow-redirects sensitiveHeaders regex escaping can expose credential headers

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacharacters unescaped in sensitiveHeaders. When an application declares a sensitive header whos…

follow-redirects follow-redirects langfuse-3-worker prism Debian Ubuntu Wolfi npm

Oct 19, 2026
High 8.0

CVE-2022-0155 Public exploit

Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

follow-redirects follow-redirects/follow-redirects js-jquery node-follow-redirects Debian Ubuntu Azure Linux npm

Jan 10, 2022