The cpp-httplib HTTP client improperly handles cross-origin HTTP redirects (301, 302, 307, 308). Specifically, it forwards stored Basic Auth, Bearer Token, and Digest Auth credentials to arbitrary hosts when following these redirects. A malicious or compromised server can redirect the client to an attacker-controlled host, which then receives the plaintext credentials in the `Authorization` header. This could allow an attacker to obtain sensitive authentication information.