CWE-669 vulnerabilities

58 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.2	EPSS 0.2%	CVE-2025-54956r-lib gh · Incorrect Resource Transfer Between Spheres Low3.2EPSS 0.2%2025-08-03CVE Database V5CVE-2025-54956 The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request. EPSS 0.2%Vulnerability CWE-669	CVE Database V5	2025-08-03
Medium	4.4	EPSS 1.1%	CVE-2024-37891urllib3 · Incorrect Resource Transfer Between Spheres Medium4.4EPSS 1.1%2024-06-17GCVE DatabaseCVE-2024-37891 CVE-2024-37891 is a vulnerability in the Python HTTP client library urllib3 related to improper handling of the Proxy-Authorization header during cross-origin redirects when not using urllib3's proxy support. This can lead to the header being unintentionally sent to unintended origins. The issue requires specific conditions to be exploitable and is considered low risk for most users. Fixed in versions 1.26.19 and 2.2.2. EPSS 1.1%Vulnerability CWE-669	GCVE Database	2024-06-17

Page 4 of 4