Exposure of sensitive information in follow-redirects

MÉDIO 6.5CVE-2022-0155 · GHSA-74fj-2j2h-c42q · Published 10/01/2022 · updated 17/06/2026

Em resumo

CVE-2022-0155 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta follow-redirects (follow-redirects project), sinec ins (siemens), follow-redirects.
Chance de exploração nos próximos 30 dias (EPSS): 2.6%, maior que 85.4% das vulnerabilidades.
Correção: atualize para 1.14.7, 1.0 ou posterior.

Package	Affected versions	Patched versions
follow-redirects follow-redirects_project	`< 1.14.7`	`1.14.7`
sinec ins siemens	`= 1.0< 1.0`	`1.0`
follow-redirects npm	`< 1.14.7`	`1.14.7`

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

NVD description

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.14.7

1.14.7

= 1.0< 1.0

1.0

npm

< 1.14.7

1.14.7

Mais vulnerabilidades de follow-redirects

Ver tudo →