{"action":"Upgrade follow-redirects to 1.15.4 or later.","affected":[{"fixed":"1.15.4","introduced":"0"}],"component":"follow-redirects","cve_ids":["CVE-2023-26159"],"ecosystem":"npm","epss":0.00797,"exploited":false,"fixed_versions":["1.15.4"],"ghsa_id":"GHSA-jchw-25xp-jwwc","id":"tcs_01M5KFXP91PT35S9HNC327AP2K","modified_at":"2026-09-10T03:50:04.950374112Z","published_at":"2024-01-02T06:30:30Z","references":["https://osv.dev/vulnerability/GHSA-jchw-25xp-jwwc","https://nvd.nist.gov/vuln/detail/CVE-2023-26159","https://github.com/follow-redirects/follow-redirects/issues/235","https://github.com/follow-redirects/follow-redirects/pull/236","https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d","https://github.com/follow-redirects/follow-redirects","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZ425BFKNBQ6AK7I5SAM56TWON5OF2XM","https://security.netapp.com/advisory/ntap-20241108-0002","https://security.snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6141137"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-jchw-25xp-jwwc","url":"https://osv.dev/vulnerability/GHSA-jchw-25xp-jwwc"}],"summary":"Follow Redirects improperly handles URLs in the url.parse() function"}