Back Linuxsecurity

Ubuntu 22.04 LTS USN-8217-1 node-follow

Linuxsecurity •LinuxSecurity Advisories • April 28, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in follow-redirects. Software Description: - node-follow-redirects: Node.js module that automatically follows HTTP(S) redirects Details: It was discovered that follow-redirects did not properly protect sensitive user information during redirects. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0155) It was discovered that follow-redirects did not properly remove sensitive information before storage or transfer. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0536) It was discovered that follow-redirects did not properly validate URLs when handling certain inputs. An attacker could possibly use this issue to

The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS node-follow-redirects 1.14.9+~1.14.1-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS node-follow-redirects 1.2.4-1ubuntu0.20.04.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS node-follow-redirects 1.2.4-1ubuntu0.18.04.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2022-0155, CVE-2022-0536, CVE-2023-26159, CVE-2024-28849

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Ubuntu Follow-Redirects Expose User Data A series of vulnerabilities were identified in the follow-redirects module affecting Ubuntu 18.04 LTS, 20.04 LTS, and 22.04 LTS. These vulnerabilities include improper handling of sensitive user information during redirects, potentially allowing attackers to expose sensitive data (CVE-2022-0155, CVE-2022-0536). Additionally, issues with URL validation (CVE-2023-26159) and proxy authentication headers (CVE-2024-28849) were discovered, which could lead to phishing attacks and credential exposure. The vulnerabilities primarily affect users of the node-follow-redirects module, which is used for HTTP(S) redirects in Node.js applications. Affected users are advised to update their systems to mitigate these risks. The vulnerabilities were reported on April 28, 2026, with patches available for all affected Ubuntu versions. The issues pose a significant risk to user data security across multiple Ubuntu releases. 2 sources 58

Extracted Entities

Ubuntu 22.04 LTS USN-8217-1 node-follow

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (4)

CWE Weaknesses (1)

MITRE ATT&CK (2)