Vulnerabilities in follow-redirects software