Exposure of sensitive information in follow-redirects

MEDIO 6.5CVE-2022-0155 · GHSA-74fj-2j2h-c42q · Published 10/01/2022 · updated 17/06/2026

En resumen

CVE-2022-0155 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a follow-redirects (follow-redirects project), sinec ins (siemens), follow-redirects.
Probabilidad de explotación en los próximos 30 días (EPSS): 2.6%, mayor que el 85.4% de las vulnerabilidades.
Solución: actualizar a 1.14.7, 1.0 o posterior.

Package	Affected versions	Patched versions
follow-redirects follow-redirects_project	`< 1.14.7`	`1.14.7`
sinec ins siemens	`= 1.0< 1.0`	`1.0`
follow-redirects npm	`< 1.14.7`	`1.14.7`

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

NVD description

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

En resumen

CVE-2022-0155 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a follow-redirects (follow-redirects project), sinec ins (siemens), follow-redirects.

Probabilidad de explotación en los próximos 30 días (EPSS): 2.6%, mayor que el 85.4% de las vulnerabilidades.

Solución: actualizar a 1.14.7, 1.0 o posterior.

Package

Affected versions

Patched versions

< 1.14.7

1.14.7

= 1.0< 1.0

1.0

npm

< 1.14.7

1.14.7

Más vulnerabilidades de follow-redirects

Ver todo →