copilot_web vulnerabilities

CVEs whose affected-version data names the copilot_web package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-24301High· 8.8PoC

1mo ago

Microsoft Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

▾ MidnightMicrosoft · Copilot WebEPSS 2.7%via CVEORG