CVE-2026-116689 | follow-redirects up to 1.16.1 sensitiveHeaders cross-domain policy

October 27, 2026 Yanac

A vulnerability categorized as problematic has been discovered in follow-redirects up to 1.16.1. The affected element is an unknown function. The manipulation of the argument sensitiveHeaders results in permissive cross-domain policy with untrusted domains.

This vulnerability is cataloged as CVE-2026-116689. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More