A vulnerability has been found in follow-redirects up to 1.15.3 and classified as critical. This vulnerability affects the function url.parse. The manipulation of the argument hostname leads to improper input validation.

This vulnerability was named CVE-2023-26159. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.