Follow Redirects

follow-redirects

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Follow Redirects

follow_redirects

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-26159 1Follow Redirects 1Follow Redirects Jun 17, 2026 Jan 2, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated t...Show more Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-26159

1Follow Redirects

Jun 17, 2026

Jan 2, 2024

N/A· v4

6.1 MEDIUM· v3

N/A· v2

Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.Show less