Exposure of sensitive information in follow-redirects

中危 6.5CVE-2022-0155 · GHSA-74fj-2j2h-c42q · Published 10/01/2022 · updated 17/06/2026

要点

CVE-2022-0155 是影响 follow-redirects (follow-redirects project), sinec ins (siemens), follow-redirects 的中危 (CVSS 6.5)漏洞。
未来 30 天内被利用的概率（EPSS）：2.4%，高于 84.2% 的漏洞。
修复：升级到 1.14.7, 1.0 或更高版本。

Package	Affected versions	Patched versions
follow-redirects follow-redirects_project	`< 1.14.7`	`1.14.7`
sinec ins siemens	`= 1.0< 1.0`	`1.0`
follow-redirects npm	`< 1.14.7`	`1.14.7`

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

NVD description

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.14.7

1.14.7

= 1.0< 1.0

1.0

npm

< 1.14.7

1.14.7

follow-redirects 的其他漏洞

查看全部 →