Exposure of sensitive information in follow-redirects

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-0155 · ADVISORY
• follow-redirects/follow-redirects commit 8b347cb · WEB
• cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf · WEB
• follow-redirects/follow-redirects · WEB
• huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406 · WEB

follow-redirects のその他の脆弱性

• CVE-2026-40895高 7.5follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. Prior to…
• CVE-2024-28849中 6.5follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affec…
• CVE-2022-0536中 5.9Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.