EUVD-2026-24472

🗓️ 21 Apr 2026 19:59:59Reported by EUVDType

Follow-redirects forwarded custom authentication headers on cross-domain redirects.

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in i18next, follow-redirects, & brace-expansion	25 Jun 202619:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in follow-redirects (CVE-2026-40895)	31 May 202616:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses follow-redirects-1.15.11.tgz which is vulnerable to CVE-2026-40895	29 May 202610:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in axios, follow-redirects, fast-uri and babel might affect IBM Storage Defender Sentinel Anomaly Scan Engine.	27 Jun 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	5 May 202616:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in follow-redirects-1.15.11.tgz	1 Jun 202615:09	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in follow-redirects	23 Jun 202609:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.	3 Jun 202607:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	24 Jun 202606:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by an information exposure vulnerability (CVE-2026-40895)	24 Jun 202618:34	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "0de390a1-e6bb-3ddc-8780-054a50b7e1b8",
        "vendor": {
          "name": "follow-redirects"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "232a82dd-fb66-366c-ab2c-4475bcc6c58f",
        "product": {
          "name": "follow-redirects"
        },
        "product_version": "< 1.16.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653

21 Apr 2026 19:59Current

5.8Medium risk

Vulners AI Score5.8

CVSS 46.9

EPSS0.00296