{"action":"Upgrade follow-redirects to 1.14.7 or later.","affected":[{"fixed":"1.14.7","introduced":"0"}],"component":"follow-redirects","cve_ids":["CVE-2022-0155"],"ecosystem":"npm","epss":0.02426,"exploited":false,"fixed_versions":["1.14.7"],"ghsa_id":"GHSA-74fj-2j2h-c42q","id":"tcs_01M5KF8RFXBX4TYP9C3H9NSJZ9","modified_at":"2026-09-10T03:49:10.642592133Z","published_at":"2022-01-12T22:46:26Z","references":["https://osv.dev/vulnerability/GHSA-74fj-2j2h-c42q","https://nvd.nist.gov/vuln/detail/CVE-2022-0155","https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22","https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","https://github.com/follow-redirects/follow-redirects","https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-74fj-2j2h-c42q","url":"https://osv.dev/vulnerability/GHSA-74fj-2j2h-c42q"}],"summary":"Exposure of sensitive information in follow-redirects"}