OSV security advisoryHigh
High advisory for follow-redirects
ROOT-APP-NPM-CVE-2026-111755 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
follow-redirectsAffected product
Advisory overview
Root has patched CVE-2026-111755 in the follow-redirects package for Root:npm. Multiple fixed versions available.
Affected packages and releases
Root:npm / follow-redirects
introduced: 0 · fixed: 1.16.0-aikido.1 · fixed: 1.16.0-aikido.2 · fixed: 1.16.1-aikido.1
Root:npm / @rootio/follow-redirects
introduced: 0 · fixed: 1.16.0-root.io.1 · fixed: 1.16.0-root.io.2 · fixed: 1.16.1-root.io.1