What’s Vulnerable › Products

microsoft kiota-typescript vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your microsoft kiota-typescript version is affected

Latest microsoft kiota-typescript vulnerabilities

• CVE-2026-49336 — @microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter (CVSS 5.5)
• CVE-2026-44503 — Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect (CVSS 7.0)