kiota vulnerabilities

CVEs whose affected-version data names the kiota package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-41134High· 7.8

5mo ago

Kiota is an OpenAPI based HTTP Client code generator

Kiota is an OpenAPI based HTTP Client code generator. Versions prior to 1.29.1 and 1.31.1 are affected by a code-generation literal injection vulnerability in multiple writer sinks (for example: serialization/deserialization keys, path/q…

▾ Twilightmicrosoft · kiotaEPSS 0.42%via NVD