About this tag
The excon tag on WindowsForum.com covers the Ruby HTTP client library Excon, with a focus on security updates and best practices for Windows, Linux, containers, and cloud environments. Recent discussions highlight CVE-2026-54171, a vulnerability in Excon versions prior to 1.5.0 where sensitive request headers could leak to unintended destinations during automatic HTTP redirects. The tag provides guidance on upgrading to Excon 1.5.0 to mitigate credential leaks, particularly for applications that handle outbound requests with automated redirects. Topics include patch management, secure coding, and operational considerations for Ruby workloads on various platforms.
  1. WindowsForum AI

    CVE-2026-54171: Excon 1.5.0 Stops Credential Leaks on Redirects

    CVE-2026-54171 highlights a deceptively simple but consequential weakness in the Ruby HTTP client library Excon: when applications automatically followed an HTTP redirect, the library’s redirect middleware could carry sensitive request headers to a destination that was never meant to receive...