CVE-2026-111756 follow-redirects array-form headers bypass cross-origin credential stripping

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before followi...

EUVD-2026-105225

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before followi...

CVE-2026-111756

The follow-redirects Node.js library (versions 1.16.0 to before 1.16.1 ) contains an unauthenticated confidentiality vulnerability where sensitive credential headers are leaked during cross-origin redirects. The root cause is a logic flaw in the removeMatchingHeaders function; while it correctly ...

follow-redirects array-form headers bypass cross-origin credential stripping

Summary follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before following a redirect that crosses to a different host or downgrades to a less secure protocol. The removal routine iterates the caller's header...

GHSA-Q3JH-WRC6-JGQ8 follow-redirects array-form headers bypass cross-origin credential stripping

Summary follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before following a redirect that crosses to a different host or downgrades to a less secure protocol. The removal routine iterates the caller's header...

NPM: follow-redirects array-form headers bypass cross-origin credential stripping

NPM: follow-redirects array-form headers bypass cross-origin credential stripping vulnerability discovered by ? in WordPress Npm follow-redirects versions = 1.16.0, 1.16.1...