[Snyk] Upgrade follow-redirects from 1.13.3 to 1.14.7

[snyk-bot]

Snyk has created this PR to upgrade follow-redirects from 1.13.3 to 1.14.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2022-01-10.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: follow-redirects

• 1.14.7 - 2022-01-10
  No content.
• 1.14.6 - 2021-12-08
  No content.
• 1.14.5 - 2021-10-30
  No content.
• 1.14.4 - 2021-09-14
  No content.
• 1.14.3 - 2021-09-02
  

  Release version 1.14.3 of the npm package.

• 1.14.2 - 2021-08-18
  No content.
• 1.14.1 - 2021-05-09
  No content.
• 1.14.0 - 2021-04-25
  No content.
• 1.13.3 - 2021-02-27
  No content.

from follow-redirects GitHub release notes

Commit messages

Package name: follow-redirects

• 2ede36d Release version 1.14.7 of the npm package.
• 8b347cb Drop Cookie header across domains.
• 6f5029a Release version 1.14.6 of the npm package.
• af706be Ignore null headers.
• d01ab7a Release version 1.14.5 of the npm package.
• 40052ea Make compatible with Node 17.
• 86f7572 Fix: clear internal timer on request abort to avoid leakage
• 2e1eaf0 Keep Authorization header on subdomain redirects.
• 2ad9e82 Carry over Host header on relative redirects (Fixture is not able to find the file path in case of formdataFileCollection #172)
• 77e2a58 Release version 1.14.4 of the npm package.
• eb6e76f Fix another self mention.
• f26c6c6 Release version 1.14.3 of the npm package.
• 3f1b2f5 Fix timeout clearing.
• 422890d Release version 1.14.2 of the npm package.
• af63a04 Update package-lock.json version.
• 21ba514 fix: address jest testing issue (fixes Should err variable check or rename as _(underscore) #153)
• 1b45be4 Remove CI on 6.0.
• 889b0eb Release version 1.14.1 of the npm package.
• ffa0a85 Update dependencies.
• 8c6667f Do not remove all listeners on abort.
• bbe5769 Release version 1.14.0 of the npm package.
• cdd921f Fix socket leak.
• 403aa2b Update y18n.
• e9c1a5d Test on Node 16.

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs