github_osv/GHSA-r683-j2x4-v87g
node-fetch forwards secure headers to untrusted sites
node-fetch forwards secure headers such as `authorization`, `www-authenticate`, `cookie`, & `cookie2` when redirecting to a untrusted site.
gitlab/npm/node-fetch/CVE-2022-0235
URL Redirection to Untrusted Site ('Open Redirect')
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor