Start for Free
npm

follow-redirects

View on npm registry
8 Total advisories
8 Vulnerabilities
0 Malware

Dependency scanning

Check whether follow-redirects is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

UNKNOWN
npm

CVE-2026-40895

follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets
MEDIUM 5.9
npm

CVE-2026-116689

follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
UNKNOWN
npm

CVE-2026-111756

follow-redirects array-form headers bypass cross-origin credential stripping
UNKNOWN
npm

CVE-2026-111755

follow-redirects sensitiveHeaders regex escaping can expose credential headers
MEDIUM 6.5
npm

CVE-2024-28849

follow-redirects' Proxy-Authorization header kept across hosts
MEDIUM 6.1
npm

CVE-2023-26159

Follow Redirects improperly handles URLs in the url.parse() function
MEDIUM 5.9
npm

CVE-2022-0536

Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects
HIGH 8.0
npm

CVE-2022-0155

Exposure of sensitive information in follow-redirects

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes