Follow-Redirects

7 CVEs in 3 Follow-Redirects products, including Follow-Redirects, Follow-Redirects/follow-Redirects, Follow Redirects.

Follow-Redirects products with known CVEs

ProductCVEs
Follow-Redirects4
Follow-Redirects/follow-Redirects2
Follow Redirects1
Follow-Redirects CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1117562026-10-20follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirect…
CVE-2026-1117552026-10-19follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-nam…
CVE-2026-40895High7.52026-04-21follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. Prior to 1.16.0, when an HT…
CVE-2024-28849Medium6.52024-03-14follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow…
CVE-2023-26159High7.32024-01-02Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() func…
CVE-2022-0536Low2.62022-02-09Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.
CVE-2022-0155Medium6.52022-01-10follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor