follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets
follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets (moderate). GHSA-r4q5-vmmm-2653, CVE-2026-40895.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?