CVE-2025-21620

Summary

CVE-2025-21620 is a vulnerability affecting Deno, a JavaScript, TypeScript, and WebAssembly runtime. When making a request with an Authorization header to one domain, Deno's fetch() function processes redirects by preserving the original header in subsequent requests, leading to information leakage when the response prompts a redirection to a different domain. This issue has been resolved in Deno version 2.1.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.