{"id":"EUVD-2026-104536","enisaUuid":"c72f41c1-a4ab-308f-b0b2-c093e6c2a255","description":"follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacharacters unescaped in sensitiveHeaders. When an application declares a sensitive header whose name contains ^ or | and follows a cross-origin or HTTPS-to-HTTP redirect, unescaped regular-expression metacharacters prevent the generated filter from matching the declared header name, and the credential header is forwarded to an attacker-controlled redirect target. This issue is fixed in version 1.16.1.","datePublished":"Oct 19, 2026, 5:27:09 PM","dateUpdated":"Oct 19, 2026, 6:00:16 PM","baseScore":8.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c\nhttps://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\nhttps://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1\n","aliases":"CVE-2026-111755\nGHSA-8r9p-f939-6h3c\n","assigner":"GitHub_M","epss":0.47,"enisaIdProduct":[{"id":"a8a9ddee-3a7a-3a24-879a-d2feebf90915","product":{"name":"follow-redirects","vendor":{"name":"follow-redirects"}},"product_version":"1.16.0, \u003c 1.16.1"}],"enisaIdVendor":[{"id":"b1e01101-af4e-3947-abae-ba6b701d46a7","vendor":{"name":"follow-redirects"}}],"enisaIdVulnerability":[{"id":"872a1e18-6589-376b-8b12-e2670387aa68","vulnerability":{"id":"GHSA-8r9p-f939-6h3c","description":"follow-redirects sensitiveHeaders regex escaping can expose credential headers","datePublished":"Oct 20, 2026, 5:53:05 PM","dateUpdated":"Oct 20, 2026, 5:53:05 PM","baseScore":0.0,"references":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-111755\nhttps://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\nhttps://github.com/follow-redirects/follow-redirects\nhttps://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1\n","enisa_id":"EUVD-2026-104536\n","aliases":"CVE-2026-111755\nGHSA-8r9p-f939-6h3c\n","epss":0.0,"dataProcessed":"Oct 29, 2026, 7:03:23 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"9de802b9-2be1-35a2-b716-2c845a4e713c","vulnerability":{"id":"CVE-2026-111755","description":"follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacharacters unescaped in sensitiveHeaders. When an application declares a sensitive header whose name contains ^ or | and follows a cross-origin or HTTPS-to-HTTP redirect, unescaped regular-expression metacharacters prevent the generated filter from matching the declared header name, and the credential header is forwarded to an attacker-controlled redirect target. This issue is fixed in version 1.16.1.","datePublished":"Oct 19, 2026, 5:27:09 PM","dateUpdated":"Oct 19, 2026, 6:00:16 PM","status":"PUBLISHED","baseScore":8.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c\nhttps://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\nhttps://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1\n","enisa_id":"EUVD-2026-104536\n","assigner":"GitHub_M","epss":0.47,"dataProcessed":"Oct 29, 2026, 7:14:06 AM","vulnerabilityProduct":[{"id":"09fbd4af-74b9-33cc-b787-55ef525df01c","product":{"name":"follow-redirects","vendor":{"name":"follow-redirects"}},"product_version":"1.16.0, \u003c 1.16.1"}],"vulnerabilityVendor":[{"id":"c783584c-e377-3c96-bbc8-6140b3d4ad06","vendor":{"name":"follow-redirects"}}]}}],"enisaIdAdvisory":[{"id":"a8dfc7cb-78ef-3253-8923-c63ead3f374d","advisory":{"id":"RHSA-2026:88541","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 23, 2026, 2:59:13 AM","dateUpdated":"Oct 23, 2026, 5:39:18 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:88541\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88541.json\n","aliases":"CVE-2026-40895\nCVE-2026-111755\nCVE-2026-111756\nCVE-2026-114125\nCVE-2026-114126\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"12647ded-34be-3382-b4ea-96d80bc46606","product":{"name":"grafana13.2-0:13.2.4-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"1ba9a7b6-b93a-3827-8562-69c159281910","product":{"name":"grafana13.2-0:13.2.4-0.3.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"9a9b4d44-debf-39c6-afbd-db49c32117f1","product":{"name":"grafana13.2-0:13.2.4-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a11f28bb-db66-3823-b996-24cea33e0f4e","product":{"name":"grafana13.2-0:13.2.4-0.3.hum1@s390x","vendor":{"name":"Red Hat"}}},{"id":"a70351d2-2ed1-3591-a782-fce4c7f8bf32","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"af0c6990-602a-3696-ab3f-a10f086c75cd","advisory":{"id":"RHSA-2026:88537","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 23, 2026, 2:44:52 AM","dateUpdated":"Oct 23, 2026, 5:39:12 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:88537\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88537.json\n","aliases":"CVE-2026-111755\nCVE-2026-111756\nCVE-2026-114125\nCVE-2026-114126\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"808e1ae6-5952-3079-91e5-6e5e55907a8f","product":{"name":"grafana13.1-0:13.1.8-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"b0ac5b27-79e5-3098-bc9c-60a32f88ef3c","product":{"name":"grafana13.1-0:13.1.8-0.4.hum1@s390x","vendor":{"name":"Red Hat"}}},{"id":"e2e46c28-81e5-3771-8615-39f32be989d2","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"e354f31d-4406-3112-8c80-7f6ebc8b6eb4","product":{"name":"grafana13.1-0:13.1.8-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ee6c0769-6bbd-36a3-a31e-d4cf7d0068b6","product":{"name":"grafana13.1-0:13.1.8-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"fde3c040-1704-336f-a5ac-f9384eb45221","advisory":{"id":"RHSA-2026:88478","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 23, 2026, 1:10:24 AM","dateUpdated":"Oct 23, 2026, 5:39:12 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:88478\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88478.json\n","aliases":"CVE-2026-111755\nCVE-2026-111756\nCVE-2026-114125\nCVE-2026-114126\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"00b01034-98f9-3910-b49c-3b5736179aae","product":{"name":"grafana12.4-0:12.4.13-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"471e265c-9e89-3e31-85cd-919f8641339a","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"8b484f90-8a4e-3a2c-bcca-81ea341db71f","product":{"name":"grafana12.4-0:12.4.13-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d98f79ac-2aea-31c6-aa4f-5e19eefb45fa","product":{"name":"grafana12.4-0:12.4.13-0.3.hum1@src","vendor":{"name":"Red Hat"}}}]}}]}