{"schema":"vulnpedia.research/1","cve":"CVE-2026-111755","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c","tags":["x_refsource_CONFIRM","exploit","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T17:27:09.215Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T17:27:09.215Z","url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-19T18:00:16.343Z","url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c"},{"source":"nvd","sourceId":"CVE-2026-111755","modified":"2026-10-19T21:13:39.973","url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c"},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c"}]},{"url":"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T17:27:09.215Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T17:27:09.215Z","url":"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8"},{"source":"nvd","sourceId":"CVE-2026-111755","modified":"2026-10-19T21:13:39.973","url":"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","url":"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","url":"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8"},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8"}]},{"url":"https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T17:27:09.215Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T17:27:09.215Z","url":"https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1"},{"source":"nvd","sourceId":"CVE-2026-111755","modified":"2026-10-19T21:13:39.973","url":"https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","url":"https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","url":"https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1"},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1"}]},{"url":"https://osv.dev/vulnerability/GHSA-8r9p-f939-6h3c","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","origins":[{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","url":"https://osv.dev/vulnerability/GHSA-8r9p-f939-6h3c"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","url":"https://osv.dev/vulnerability/GHSA-8r9p-f939-6h3c"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111755","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","origins":[{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111755"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111755"},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111755"}]},{"url":"https://github.com/follow-redirects/follow-redirects","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","origins":[{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","url":"https://github.com/follow-redirects/follow-redirects"},{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","url":"https://github.com/follow-redirects/follow-redirects"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-111755","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-111755"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555733","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555733"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-111755","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-111755"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88478","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88478"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88537","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88537"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88541","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88541"}]},{"source":"euvd","sourceId":"EUVD-2026-104536","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104536","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-104536","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104536"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","url":"https://osv.dev/vulnerability/GHSA-8r9p-f939-6h3c","ecosystem":"npm","name":"follow-redirects","purl":"pkg:npm/follow-redirects","ranges":[{"type":"SEMVER","events":[{"introduced":"1.16.0"},{"fixed":"1.16.1"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-8r9p-f939-6h3c/GHSA-8r9p-f939-6h3c.json"},"modified":"2026-10-20T18:00:04.701467015Z","origins":[{"source":"ghsa","sourceId":"GHSA-8r9p-f939-6h3c","modified":"2026-10-20T18:00:04.701467015Z","url":"https://osv.dev/vulnerability/GHSA-8r9p-f939-6h3c"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.3.hum1@aarch64","product":"grafana12.4-0:12.4.13-0.3.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88478"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.13-0.3.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.3.hum1@src","product":"grafana12.4-0:12.4.13-0.3.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88478"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.13-0.3.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.3.hum1@x86_64","product":"grafana12.4-0:12.4.13-0.3.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88478"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.13-0.3.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.8-0.4.hum1@aarch64","product":"grafana13.1-0:13.1.8-0.4.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88537"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.4.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.8-0.4.hum1@s390x","product":"grafana13.1-0:13.1.8-0.4.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88537"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.4.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.8-0.4.hum1@src","product":"grafana13.1-0:13.1.8-0.4.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88537"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.4.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.8-0.4.hum1@x86_64","product":"grafana13.1-0:13.1.8-0.4.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88537"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.4.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.4-0.3.hum1@aarch64","product":"grafana13.2-0:13.2.4-0.3.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88541"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.4-0.3.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.4-0.3.hum1@s390x","product":"grafana13.2-0:13.2.4-0.3.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88541"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.4-0.3.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.4-0.3.hum1@src","product":"grafana13.2-0:13.2.4-0.3.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88541"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.4-0.3.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.4-0.3.hum1@x86_64","product":"grafana13.2-0:13.2.4-0.3.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:88541"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.4-0.3.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"red_hat_hardened_images:prometheus3.5.src","product":"prometheus3.5.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/prometheus3.5@3.5.5-0.8.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]},{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json","productId":"red_hat_hardened_images:prometheus3.13.src","product":"prometheus3.13.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/prometheus3.13@3.13.4-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-111755","modified":"2026-10-23T05:22:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111755.json"}]}],"vendorCoverage":{"total":13,"shown":13,"omitted":0,"source":"redhat"}}