Summary
Cross-origin redirects can forward sensitive headers. This medium-severity finding affects urllib3.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Cross-origin redirects can forward sensitive headers
CVE-2026-44431
- Affected product
- urllib3
- Severity
- Medium · CVSS 5.3
- Weakness
- CWE-200
- Disclosed