Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 09:38 UTC Customize Public modeDiscuss ChangeIntel on Discord

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

cve-program · CVE-2026-44503

Published

kiota-java

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "microsoft",
                    "product": "kiota-java",
                    "versions": [
                        {
                            "version": "< 1.9.1",
                            "status": "affected"
                        }
                    ]
                }

Microsoft.Kiota.Abstractions

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "microsoft",
                    "product": "Microsoft.Kiota.Abstractions",
                    "versions": [
                        {
                            "version": "< 1.22.0",
                            "status": "affected"
                        }
                    ]
                }

github.com/microsoft/kiota-http-go

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "microsoft",
                    "product": "github.com/microsoft/kiota-http-go",
                    "versions": [
                        {
                            "version": "< 1.5.5",
                            "status": "affected"
                        }
                    ]
                }

kiota-typescript

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "microsoft",
                    "product": "kiota-typescript",
                    "versions": [
                        {
                            "version": "< 1.0.0-preview.100",
                            "status": "affected"
                        }
                    ]
                }

microsoft-kiota-abstractions

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "microsoft",
                    "product": "microsoft-kiota-abstractions",
                    "versions": [
                        {
                            "version": "< 1.9.1",
                            "status": "affected"
                        }
                    ]
                }

microsoft-kiota-http

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "microsoft",
                    "product": "microsoft-kiota-http",
                    "versions": [
                        {
                            "version": "< 1.9.9",
                            "status": "affected"
                        }
                    ]
                }

euvd · EUVD-2026-30323

Published

No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.

nvd · CVE-2026-44503

Published

No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.

osv · GHSA-7j59-v9qr-6fq9

Published

com.microsoft.kiota:microsoft-kiota-abstractions

Maven

ECOSYSTEM · introduced 0 → fixed 1.9.1

80 explicitly affected versions

0.1.2, 0.10.0, 0.11.0, 0.11.1, 0.11.2, 0.12.0, 0.12.1, 0.12.2, 0.2.0, 0.2.1, 0.3.0, 0.3.1, 0.3.2, 0.3.3, 0.4.0, 0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.4.5, 0.4.6, 0.4.7, 0.5.0, 0.6.0, 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7, 0.7.8, 0.8.0, 0.9.0, 0.9.1, 0.9.2, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.1.0, 1.1.1, 1.1.10, 1.1.11, 1.1.12, 1.1.13, 1.1.14, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.2.0, 1.3.0, 1.4.0, 1.5.0, 1.5.1, 1.6.0, 1.7.0, 1.8.0, 1.8.1, 1.8.10, 1.8.11, 1.8.12, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8, 1.8.9, 1.9.0

Microsoft.Kiota.Abstractions

NuGet

ECOSYSTEM · introduced 0 → fixed 1.22.0

88 explicitly affected versions

1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.10.0, 1.10.1, 1.11.0, 1.11.1, 1.11.2, 1.11.3, 1.12.0, 1.12.1, 1.12.2, 1.12.3, 1.12.4, 1.13.0, 1.13.1, 1.13.2, 1.14.0, 1.15.0, 1.15.1, 1.15.2, 1.16.0, 1.16.1, 1.16.2, 1.16.3, 1.16.4, 1.17.0, 1.17.1, 1.17.2, 1.17.3, 1.17.4, 1.18.0, 1.19.0, 1.19.1, 1.2.0, 1.2.1, 1.20.0, 1.20.1, 1.21.0, 1.21.1, 1.21.2, 1.21.3, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.4.0, 1.5.0, 1.6.0, 1.6.1, 1.7.0, 1.7.1, 1.7.10, 1.7.11, 1.7.12, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.0, 1.9.1, 1.9.10, 1.9.11, 1.9.12, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 1.9.7, 1.9.8, 1.9.8-preview, 1.9.9

microsoft-kiota-http

PyPI

ECOSYSTEM · introduced 0 → fixed 1.9.9

53 explicitly affected versions

0.1.0, 0.1.1, 0.1.2, 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.3.0, 0.3.1, 0.4.0, 0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.5.0, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 1.0.0, 1.1.0, 1.2.0, 1.2.1, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.4.4, 1.4.5, 1.4.6, 1.5.0, 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.7.0, 1.7.1, 1.8.0, 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 1.9.7, 1.9.8

kiota-typescript

npm

SEMVER · introduced 0 → fixed 1.0.0-preview.100

github.com/microsoft/kiota-http-go

Go

SEMVER · introduced 0 → fixed 1.5.5

osv · GO-2026-5224

Published

github.com/microsoft/kiota-http-go

Go

SEMVER · introduced 0 → fixed 1.5.5

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 28 Oct 09:38 UTC · 272 of 272 readable · 268 fully read · documentation 469/469 current