Security Alert - Package: follow-redirects; Severity: HIGH

[phenggeler]

    Affected package: follow-redirects
    Ecosystem: NPM
    Affected version range: < 1.14.7

    Summary: Exposure of sensitive information in follow-redirects
    Description: follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
    identifiers: [{'type': 'GHSA', 'value': 'GHSA-74fj-2j2h-c42q'}, {'type': 'CVE', 'value': 'CVE-2022-0155'}]

    Fixed Version: 1.14.7
    Created Date = January 25, 2022

    

    ---

[phenggeler]

@phenggeler - label applied: Due this month.