6 matches found
@diligencefabric/client-sdk (>=0.0.1, <=0.0.2), @jtl-software/cloud-apps-rest-sdk (0.0.1) potentially affected by CVE-2026-49336 via @microsoft/kiota-http-fetchlibrary (1.0.0-preview.100)
@microsoft/kiota-http-fetchlibrary NPM version 1.0.0-preview.100 is affected by a known vulnerability. The following packages have a transitive dependency on @microsoft/kiota-http-fetchlibrary and may be impacted: - @diligencefabric/client-sdk =0.0.1, =0.0.2 - @jtl-software/cloud-apps-rest-sdk...
@diligencefabric/client-sdk (>=0.0.1, <=0.0.2), @jtl-software/cloud-apps-rest-sdk (0.0.1) potentially affected by CVE-2026-49336 via @microsoft/kiota-http-fetchlibrary (1.0.0-preview.100)
@microsoft/kiota-http-fetchlibrary NPM version 1.0.0-preview.100 is affected by a known vulnerability. The following packages have a transitive dependency on @microsoft/kiota-http-fetchlibrary and may be impacted: - @diligencefabric/client-sdk =0.0.1, =0.0.2 - @jtl-software/cloud-apps-rest-sdk...
@diligencefabric/client-sdk (>=0.0.1, <=0.0.2), @jtl-software/cloud-apps-rest-sdk (0.0.1) potentially affected by CVE-2026-49336 via @microsoft/kiota-http-fetchlibrary (1.0.0-preview.100)
@microsoft/kiota-http-fetchlibrary NPM version 1.0.0-preview.100 is affected by a known vulnerability. The following packages have a transitive dependency on @microsoft/kiota-http-fetchlibrary and may be impacted: - @diligencefabric/client-sdk =0.0.1, =0.0.2 - @jtl-software/cloud-apps-rest-sdk...
@diligencefabric/client-sdk (>=0.0.1, <=0.0.2), @jtl-software/cloud-apps-rest-sdk (0.0.1) potentially affected by CVE-2026-49336 via @microsoft/kiota-http-fetchlibrary (1.0.0-preview.100)
@microsoft/kiota-http-fetchlibrary NPM version 1.0.0-preview.100 is affected by a known vulnerability. The following packages have a transitive dependency on @microsoft/kiota-http-fetchlibrary and may be impacted: - @diligencefabric/client-sdk =0.0.1, =0.0.2 - @jtl-software/cloud-apps-rest-sdk...
CVE-2026-49336: Improper Handling of Case Sensitivity
@microsoft/kiota-http-fetchlibrary provides TypeScript libraries for Kiota-generated API clients. In versions 1.0.0-preview.97 through 1.0.0-preview.101, @microsoft/kiota-http-fetchlibrary's RedirectHandler is documented as stripping Authorization and Cookie from cross-origin redirect targets, bu...
@avst-perry/test-sdk (1.1.10), @microsoft/microsoft-graph-client (4.0.0-RestPreview.1) +10 more potentially affected by CVE-2026-44503 via @microsoft/kiota-http-fetchlibrary (>=1.0.0-preview.3, <=1.0.0-preview.94)
@microsoft/kiota-http-fetchlibrary NPM version =1.0.0-preview.3, =1.0.0-preview.1, =3.0.0-preview.0, =1.0.0-beta.1, =0.0.29, =1.14.1, =1.13.0, =1.0.0, =1.4.0 Source cves: CVE-2026-44503 Source advisory: SNYK:JS-MICROSOFTKIOTAHTTPFETCHLIBRARY-16699852...