Ffollow-redirects

Products

Exploited and recent CVEs

• CVE-2026-116689 Medium 5.9 follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects 0.3%
• CVE-2026-111756 High 8.2 follow-redirects array-form headers bypass cross-origin credential stripping 0.5%
• CVE-2026-111755 High 8.2 follow-redirects sensitiveHeaders regex escaping can expose credential headers 0.5%
• CVE-2026-40895 High 7.5 follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets 0.5%
• CVE-2024-28849 Medium 6.5 Proxy-Authorization header kept across hosts in follow-redirects 1.0%
• CVE-2022-0536 Low 2.6 Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects 1.3%
• CVE-2022-0155 High 8.0 Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 2.6%