103 matches found
mud-visualizer
Manufacturer Usage Description MUD Visualizer Warning: mud-visualizer is currently beta. Use at your own risk. This tool can be used to visualize the MUD files in JSON format. Table of Contents Motivation Installation Supported MUD Abstractions Contribution Support Citation License Motivation MUD...
CLEANSTART-2026-GA95827 Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor
Security vulnerability affects the apache-hive package. Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...
CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...
CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...
CVE-2024-5300
The CVE concerns Canonical snapd’s base AppArmor profile misconfiguration. Abstraction rules in /etc/apparmor.d/abstractions/nss-systemd allow strictly confined snaps to access io.systemd.Multiplexer and io.systemd.NameServiceSwitch sockets in /run/systemd/userdb/, bypassing sandbox restrictions....
CVE-2026-50267
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Abstractions 4.0.0 through 4.1.0, when MySQL or PostgreSQL service bindings from VCAPSERVICES include TLS client credentials, the Connectors libra...
ai.pipestream:account-service (>=0.0.2, <=0.0.18), ai.pipestream:connector-admin-service (>=0.1.1, <=0.1.18) +143 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (>=0.1.2, <=1.9.0)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version =0.1.2, =0.0.2, =0.1.1, =0.2.7, =0.2.7, =0.2.7, =0.1.1, =0.2.7, =0.7.21, =0.7.21, =0.7.21, =0.1.7, =0.0.1, =0.7.23 and more Source cves: CVE-2026-44503 Source advisory: MEND:CVE-2026-44503...
CVE-2026-44503
CVE-2026-44503 affects the RedirectHandler in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0, and similar Kiota libraries). The root cause is that when following 3xx redirects to a different host or scheme, only the Authorization header is removed; Cookie, Proxy-Auth...
CVE-2026-44503 Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect
The RedirectHandler middleware in microsoft/kiota-java com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0 and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie,...
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.7.8), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.7.8) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.7.8)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.7.8 ...
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.11.2), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.11.2) +13 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.11.2)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.11....
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.3.3), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.3.3) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.3.3)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.3.3 ...
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.3.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.3.0) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.3.0)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.3.0 ...
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.1), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.1) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.1)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.1 ...
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.12.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.12.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.12.0)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.12....
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.9.2), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.9.2) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.9.2)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.9.2 ...
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.3.2), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.3.2) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.3.2)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.3.2 ...
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.2), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.2) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.2)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.2 ...
com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.6), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.6) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.6)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.6 ...
ai.pipestream:account-service (>=0.0.2, <=0.0.18), ai.pipestream:connector-admin-service (>=0.1.1, <=0.1.18) +129 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (>=1.0.0, <=1.9.0)
com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version =1.0.0, =0.0.2, =0.1.1, =0.2.7, =0.2.7, =0.2.7, =0.1.1, =0.2.7, =0.7.21, =0.7.21, =0.7.21, =0.1.7, =0.0.1, =0.7.23 and more Source cves: CVE-2026-44503 Source advisory: GHSA-7J59-V9QR-6FQ9...