follow-redirects follow-redirects

• CVE-2026-116689 Medium 5.9 follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects 0.3%
• CVE-2026-111756 High 8.2 follow-redirects array-form headers bypass cross-origin credential stripping 0.5%
• CVE-2026-111755 High 8.2 follow-redirects sensitiveHeaders regex escaping can expose credential headers 0.5%
• CVE-2026-40895 High 7.5 follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets 0.5%
• CVE-2024-28849 Medium 6.5 Proxy-Authorization header kept across hosts in follow-redirects 1.0%