Follow-redirects_project Follow-redirects
4 CVEs affecting Follow-redirects_project Follow-redirects. Latest disclosed: 2026-04-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-40895 | High | 7.5 | 2026-04-21 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. Prior to 1.16.0, when an HT… |
CVE-2024-28849 | Medium | 6.5 | 2024-03-14 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow… |
CVE-2022-0155 | Medium | 6.5 | 2022-01-10 | follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor |
CVE-2022-0536 | Low | 2.6 | 2022-02-09 | Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8. |