Vulnerabilities
follow-redirects array-form headers bypass cross-origin credential stripping (High severity, CVE-2026-111756)
A high-severity advisory for the npm package follow-redirects is fixed in version 1.16.1.
follow-redirects
Everything Threat Times has reported about follow-redirects: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
High-Severity Information Disclosure Flaw in follow-redirects Tracked as CVE-2026-111755
A newly published high vulnerability in follow-redirects carries a CVSS score of 8.2. Here is what is affected and how to respond.