microsoft-kiota-http vulnerabilities

CVEs whose affected-version data names the microsoft-kiota-http package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-44503High

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

▾ Twilightmicrosoft · com.microsoft.kiota:microsoft-kiota-abstractionsEPSS 0.51%via OSV

microsoft-kiota-http vulnerabilities (CVEs) · VulnSea