follow-redirects project
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 10, 2022 to present
4
Total CVEs
1
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
43/100
medium
Severity Distribution
Critical
0High
1Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Infoleak
3
Most Affected Products
1. npm/follow-redirects4
2. Follow-redirects Project Follow-redirects Node.js4
3. IBM Data Virtualization on Cloud Pak for Data3
4. IBM Watson Query on Cloud Pak for Data3
5. redhat/follow-redirects3
Recent Vulnerabilities
See more →CVE-2026-40895
CVSS 6.9medium
follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets
4/21/2026
CVE-2024-28849
CVSS 6.5EPSS 0%medium
Proxy-Authorization header kept across hosts in follow-redirects
3/14/2024
CVE-2022-0536
CVSS 5.9medium
Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects
2/9/2022
CVE-2022-0155
CVSS 8.0high
Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects
1/10/2022
Monitor follow-redirects project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.