{"schemaVersion":3,"id":"CVE-2024-28849","aliases":["UBUNTU-CVE-2024-28849","DEBIAN-CVE-2024-28849","CGA-4j86-c5x3-fm46","CGA-6gr3-v7x6-f3qf","CGA-7mfg-3fcq-3448","CGA-932p-mf86-q3h8","CGA-g88h-6cgc-f976","CGA-gf7g-329x-6qm5","CGA-mr76-qmc5-rgwj","CGA-vc5v-572f-f58p","GHSA-cxjh-pqwp-8mfp","CGA-24qp-xp8q-6fpw","CGA-4jh7-9h32-rqx6","CGA-4q68-q994-r2p9","CGA-59v6-ww25-w6gp","CGA-66w8-xx4p-h49j","CGA-7jff-x7g5-mjx5","CGA-7mx8-vpx9-p44g","CGA-83p7-f5h3-xfq4","CGA-86jf-fqh8-xv2j","CGA-89xq-gjx2-vqj3","CGA-8mrc-f6q7-7r3m","CGA-9qr3-cwmw-cv4f","CGA-c2cg-p2vw-77wv","CGA-cfx7-mpgj-r28p","CGA-cj3r-9v2c-8v23","CGA-cxh6-v8cc-pgjc","CGA-fhr7-p3q7-7779","CGA-gpqr-7v3w-m72r","CGA-gv4v-5854-v3gh","CGA-j2f9-8w93-j8xh","CGA-j93h-f7gm-8xwp","CGA-jcc5-558m-q279","CGA-jpjq-7m8h-69h7","CGA-m7jw-3xm7-72qg","CGA-mh96-m5jx-w79p","CGA-mqh9-228x-hr72","CGA-mrv9-62v8-3257","CGA-pwp5-gf6c-96v8","CGA-q2xq-j8jq-c8xv","CGA-qw58-m6hg-4558","CGA-r9mj-h668-q2h9","CGA-rcmh-3328-h63c","CGA-rjx3-rxhj-2pvv","CGA-wcjx-739p-qr78","CGA-wgcq-f56w-hxvw","CGA-wgjg-rv3v-fp75"],"status":"published","duplicateOf":null,"title":null,"description":"follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow-redirects only clears authorization header during cross-domain redirect, but keep the proxy-authentication header which contains credentials too. This vulnerability may lead to credentials leak, but has been addressed in version 1.15.6. Users are advised to upgrade. There are no known workarounds for this vulnerability.","dates":{"published":"2024-03-14T17:07:27.338Z","modified":"2025-02-13T17:47:32.862Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01044,"percentile":0.6359,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01044},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01044,"percentile":0.6359}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01044,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01044,"percentile":0.6359}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_FOLLOW-REDIRECTS_FOLLOW-REDIRECTS","name":"Follow Redirects","source":"github","url":"https://github.com/follow-redirects/follow-redirects/issues/235","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"chainguard","product":"arangodb-3.11","name":"arangodb-3.11","label":"arangodb-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.11","purlType":"apk","versions":[{"text":"< 3.11.14.5-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.14.5-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"configurable-http-proxy","name":"configurable-http-proxy","label":"configurable-http-proxy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/configurable-http-proxy","purlType":"apk","versions":[{"text":"< 4.6.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-7","name":"kibana-7","label":"kibana-7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-7","purlType":"apk","versions":[{"text":"< 7.17.24-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.17.24-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines","name":"kubeflow-pipelines","label":"kubeflow-pipelines","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines","purlType":"apk","versions":[{"text":"< 2.0.5-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.5-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lerna","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","label":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-config","name":"opensearch-dashboards-2-fips-config","label":"opensearch-dashboards-2-fips-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-config","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-maps","name":"opensearch-dashboards-2-fips-dashboards-maps","label":"opensearch-dashboards-2-fips-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-maps","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-notifications","name":"opensearch-dashboards-2-fips-dashboards-notifications","label":"opensearch-dashboards-2-fips-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-observability","name":"opensearch-dashboards-2-fips-dashboards-observability","label":"opensearch-dashboards-2-fips-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-query-workbench","name":"opensearch-dashboards-2-fips-dashboards-query-workbench","label":"opensearch-dashboards-2-fips-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-reporting","name":"opensearch-dashboards-2-fips-dashboards-reporting","label":"opensearch-dashboards-2-fips-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-search-relevance","name":"opensearch-dashboards-2-fips-dashboards-search-relevance","label":"opensearch-dashboards-2-fips-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-visualizations","name":"opensearch-dashboards-2-fips-dashboards-visualizations","label":"opensearch-dashboards-2-fips-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","name":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","label":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-ml-commons-dashboards","name":"opensearch-dashboards-2-fips-ml-commons-dashboards","label":"opensearch-dashboards-2-fips-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.13.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"configurable-http-proxy","name":"configurable-http-proxy","label":"configurable-http-proxy","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/configurable-http-proxy","purlType":"apk","versions":[{"text":"< 4.6.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.1-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines","name":"kubeflow-pipelines","label":"kubeflow-pipelines","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines","purlType":"apk","versions":[{"text":"< 2.0.5-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.5-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/lerna","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"node-follow-redirects","name":"node-follow-redirects","label":"node-follow-redirects","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-follow-redirects","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.15.6+~1.14.4-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.15.6+~1.14.4-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-follow-redirects","name":"node-follow-redirects","label":"node-follow-redirects","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-follow-redirects","purlType":"deb","versions":[{"text":"< 1.2.4-1ubuntu0.18.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.4-1ubuntu0.20.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.14.9+~1.14.1-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.4-1ubuntu0.18.04.1~esm1 | < 1.2.4-1ubuntu0.20.04.1~esm1 | < 1.14.9+~1.14.1-1ubuntu0.1~esm1","eol":null,"hubHref":null},{"vendor":"follow-redirects_project","product":"follow-redirects","name":"follow-redirects","label":"follow-redirects","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.15.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.6","eol":null,"hubHref":"/vendor/follow-redirects_project/follow-redirects"},{"vendor":"follow-redirects","product":"follow-redirects","name":"follow-redirects","label":"follow-redirects","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.15.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.6","eol":null,"hubHref":"/vendor/follow-redirects/follow-redirects"},{"vendor":"Npm","product":"follow-redirects","name":"follow-redirects","label":"follow-redirects","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/follow-redirects","purlType":"npm","versions":[{"text":"< 1.15.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.6","eol":null,"hubHref":null}],"affectedCount":31,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp","label":"github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://github.com/psf/requests/issues/1885","label":"github.com/psf/requests/issues/1885","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Issue Tracking"]},{"url":"https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b","label":"github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Patch"]},{"url":"https://hackerone.com/reports/2390009","label":"hackerone.com/reports/2390009","hostname":"hackerone.com","tags":["X Refsource MISC","REPORT","WEB","Issue Tracking","Third Party Advisory"]},{"url":"https://fetch.spec.whatwg.org/#authentication-entries","label":"fetch.spec.whatwg.org","hostname":"fetch.spec.whatwg.org","tags":["X Refsource MISC","REPORT","WEB","Technical Description"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOIF4EPQUCKDBEVTGRQDZ3CGTYQHPO7Z/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB","Mailing List","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-28849","label":"ubuntu.com/security/CVE-2024-28849","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28849","label":"www.cve.org/CVERecord?id=CVE-2024-28849","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-8217-1","label":"ubuntu.com/security/notices/USN-8217-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-28849","label":"security-tracker.debian.org/tracker/CVE-2024-28849","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28849.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28849.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28849","label":"nvd.nist.gov/vuln/detail/CVE-2024-28849","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/follow-redirects/follow-redirects","label":"github.com/follow-redirects/follow-redirects","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOIF4EPQUCKDBEVTGRQDZ3CGTYQHPO7Z","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["MGASA-2026-0327","OPENSUSE-SU-2024:13830-1","RHSA-2024:3781","USN-8217-1"],"duplicates":[],"related":["CGA-3QPX-2JP6-8W3M","CGA-4VMV-7RFH-8Q9H","CGA-7G4Q-75VQ-228C","CGA-896M-V6FF-2Q96","CGA-8M86-GWW5-8PM9","CGA-FP6H-638C-5C69","CGA-R834-RJ47-CFJ9","CGA-VWR7-QWFJ-QHHF","CGA-W43G-68F9-2MQP","OPENSUSE-SU-2024:13830-1","USN-8217-1"]},"timeline":[{"kind":"published","date":"2024-03-14T17:07:27.338Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-02-13T17:47:32.862Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T11:54:15.372Z","stale":false,"partial":false}}