CVE-2022-0536: Follow-Redirects Project Follow-Redirects

Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days.

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.

Affected products

• Follow-Redirects Project Follow-Redirects: before 1.14.8 (fixed in 1.14.8)

Published 2022-02-09. Last modified 2026-06-17.