CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects

CVSS 2.6 LOWEPSS 1.3%CWE-212

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

follow-redirects · follow-redirects/follow-redirects

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/follow-redirects/follow-redirects/commit/62e546a99c07c3ee5e4e0718c84a6ca127c5c445 https://huntr.dev/bounties/7cf2bf90-52da-4d59-8028-a73b132de0db