yami.report

Security research and vulnerability disclosures

CVE-2024-30260: Proxy credentials forwarded across an Undici redirect

A low-severity redirect handling flaw in Undici could forward a Proxy-Authorization header to a different origin.

August 23, 2026 · 3 min · yami