CVE-2024-30260 — undici header scrubbing bypass

undici (Node.js HTTP client) failed to scrub certain auth headers on cross-origin redirects, leaking credentials similar to the follow-redirects bug.