A vulnerability has been found in follow-redirects up to 1.15.3 and classified as critical. This vulnerability affects the function
url.parse
. The manipulation of the argument hostname leads to improper input validation.
This vulnerability was named CVE-2023-26159. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.