Follow-Redirects
4 CVEs across 3 Follow-Redirects products. Browse Follow-Redirects vulnerabilities, severities, and proof-of-concept exploits.
Follow-Redirects products with known CVEs
Follow-Redirects CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-40895 | High | 7.5 | 2026-04-21 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. Prior to 1.16.0, when an HT… |
CVE-2024-28849 | Medium | 6.5 | 2024-03-14 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow… |
CVE-2023-26159 | High | 7.3 | 2024-01-02 | Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() func… |
CVE-2022-0536 | Low | 2.6 | 2022-02-09 | Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8. |
CVE-2022-0155 | Medium | 6.5 | 2022-01-10 | follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor |