What’s Vulnerable › Products

Microsoft.OpenApi.Kiota.Builder vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Microsoft.OpenApi.Kiota.Builder version is affected

Latest Microsoft.OpenApi.Kiota.Builder vulnerabilities

• CVE-2026-105796 — Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators (CVSS 8.8)
• CVE-2026-105795 — Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests (CVSS 3.1)