CVE-2026-40895 — follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

CVE-2026-40895 concerns a follow-redirects issue in which custom authentication headers may be leaked to cross-domain redirect targets.