CVE-2026-54171: Excon: redact additional sensitive/risky headers when following redirects

Overview

Severity
Medium (CVSS 6.5)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploit Status
Not Exploited
Patch Tuesday
2026-Jul
Released
2026-07-19
EPSS Score
0.45% (percentile: 36.2%)

Affected Products (1)

Open Source Software

  • azl3 rubygem-excon 0.102.0-1 on Azure Linux 3.0

Revision History

  • 2026-07-19: Information published.