Skip to content
OpenAdvisories

Product · node-modules

urllib

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-55553

    urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

    urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through followRedirect but reuses caller-supplied options across origins. In src/HttpClient…

    node-modules urllib urllib npm