Credential Disclosure Risk in Node.js Module Follow-Redirects

Linuxsecurity

Credential Disclosure Risk in Node.js Module Follow-Redirects

First seen 13 Aug 2026, 03:03 UTC • •57.8

Article Content

1 / 3

Browse articles

ThreatCluster •August 14, 2026 at 02:22 UTC

•A vulnerability in 'follow-redirects' can lead to credential disclosure.
•The flaw affects multiple Ubuntu LTS versions, requiring urgent updates.
•Users should perform standard system updates to mitigate the risk.

A vulnerability was discovered in the Node.js module 'follow-redirects' that fails to remove custom authentication headers during cross-domain redirects. This flaw, identified by Dennis Sepede, could allow attackers to obtain sensitive authentication information, leading to credential disclosure. The affected versions include node-follow-redirects 1.15.11 for Ubuntu 26.04 LTS and earlier versions for Ubuntu 24.04, 22.04, 20.04, and 18.04 LTS. Users are advised to update their systems to mitigate this risk. The vulnerability impacts systems using the affected versions of the module, particularly those handling sensitive authentication data. A standard system update is recommended to apply the necessary patches. The issue has been documented in Ubuntu Security Notice USN-8632-1.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 59d ago How this analysis works

Timeline

2026-08-12

Vulnerability disclosed by Dennis Sepede

The flaw in 'follow-redirects' was reported, allowing potential credential disclosure through improper header handling.

2026-08-13

Ubuntu Security Notice USN-8632-1 released

Ubuntu released a security notice detailing the vulnerability and recommended updates for affected systems.

More articles in this cluster (2)

Threat Graph

5 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (1)

Ubuntu

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Affected Platform (1)

Linux

Tool (1)

Node.js

Relationships

Data Breach targets Linux
Node.js related to Ubuntu
Node.js related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…