TI-2026-76983 CVE-2026-111756 · GHSA-q3jh-wrc6-jgq8
Credential headers leak across redirects in follow-redirects
Priority HIGH 69
follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects.
RHSA-2026:88537
Red Hat Hardened Images RPMs Security Update
Released 2026-10-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana13.1-13.1.8-0.4.hum1@aarch64, grafana13.1-13.1.8-0.4.hum1@s390x, grafana13.1-13.1.8-0.4.hum1@src +1
Fixes 5 records
TI-2026-76533 CVE-2026-111755 · GHSA-8r9p-f939-6h3c
Regex escaping flaw in follow-redirects leaks credential headers
Priority HIGH 69
follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects.
Priority MEDIUM 64
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.
TI-2026-78906 CVE-2026-114126 · GHSA-px85-f4q5-jh77
Storybook dev server exposes WebSocket token to LAN attackers
Priority MEDIUM 46
Storybook is a frontend workshop for building user interface components and pages in isolation.
TI-2026-78905 CVE-2026-114125 · GHSA-f2ph-cmg5-wxc8
Missing origin checks in Storybook preview allow code injection
Priority LOW 39
Storybook is a frontend workshop for building user interface components and pages in isolation.