The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker.example/).
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.0115·Published 2021-05-24·Fixed in 2.0.1CWE-601