Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/30 2:46 p.m.•13 views

linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect

Summary lib.url.fetch follows HTTP redirects followredirects=True. httpx strips only Authorization and Cookie when a redirect crosses the origin, so any other caller-supplied credential header a session token such as Redfish's X-Auth-Token, an API key, ... was still sent to the redirect target. A...

6CVSS5.8AI score0.00497EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder