Lucene search
+L

8 matches found

Kitploit
Kitploit
•added 2026/10/27 10:50 p.m.•18 views

redact

redact Strip credential-like content from free-form strings before they reach logs, telemetry, or any third-party surface Part of thephpboyscout Go toolkit: small, framework-free Go modules extracted from go-tool-base. Docs: redact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact redacts...

6.3AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/10/20 5:58 p.m.•16 views

EUVD-2026-105225

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before followi...

8.2CVSS7.1AI score0.00471EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/10/20 5:58 p.m.•26 views

follow-redirects array-form headers bypass cross-origin credential stripping

Summary follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before following a redirect that crosses to a different host or downgrades to a less secure protocol. The removal routine iterates the caller's header...

8.2CVSS6.8AI score0.00471EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/20 5:58 p.m.•24 views

GHSA-Q3JH-WRC6-JGQ8 follow-redirects array-form headers bypass cross-origin credential stripping

Summary follow-redirects removes sensitive credential headers Authorization, Proxy-Authorization, Cookie, and any caller-declared sensitiveHeaders before following a redirect that crosses to a different host or downgrades to a less secure protocol. The removal routine iterates the caller's header...

8.2CVSS6.8AI score0.00471EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/10/20 5:58 p.m.•15 views

npm: follow-redirects array-form headers bypass cross-origin credential stripping

npm: follow-redirects array-form headers bypass cross-origin credential stripping vulnerability discovered by ? in WordPress npm follow-redirects versions = 1.16.0, 1.16.1...

8.2CVSS7.2AI score0.00471EPSS
SaveExploits0References4Affected Software1
osv_clsa
osv_clsa
•added 2025/07/21 8:51 p.m.•21 views

CLSA-2025-1753131065 libsoup: Fix of 7 CVEs

CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...

7CVSS6.6AI score0.00876EPSS
SaveExploits1References1
osv_clsa
osv_clsa
•added 2025/07/21 6:54 p.m.•23 views

CLSA-2025-1753124055 libsoup: Fix of 7 CVEs

CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...

7CVSS6.6AI score0.00876EPSS
SaveExploits1References1
osv_clsa
osv_clsa
•added 2025/07/21 6:03 p.m.•27 views

CLSA-2025-1753120992 libsoup: Fix of 7 CVEs

CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...

7CVSS6.6AI score0.00876EPSS
SaveExploits1References1
Rows per page
Query Builder