By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect
Details
CVE-2020-15652 affects multiple packages. By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. See references for individual vulnerability details.