CVE-2026-44503Published
The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only…
Exact source revision recorded 27 Oct 2026 11:12:17 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-44503
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.