A redirect target is taken from unvalidated input, enabling phishing.
Redirect only to allowlisted destinations; never reflect raw URLs.
Security vulnerability in express
Security vulnerability in urllib3
Security vulnerability in urllib3
Security vulnerability in caddy
Security vulnerability in django
Security vulnerability in karma