@microsoft/kiota-http-fetchlibrary vulnerabilities

CVEs whose affected-version data names the @microsoft/kiota-http-fetchlibrary package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49336Medium

@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter

@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter

▾ Sunlitmicrosoft · @microsoft/kiota-http-fetchlibraryEPSS 1.2%via GHSA

@microsoft/kiota-http-fetchlibrary vulnerabilities (CVEs) · VulnSea