msgraph-beta-sdk (1.0.0rc0), msgraph-sdk (>=1.0.0a15, <=1.0.0rc1) potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.6.3)

microsoft-kiota-http PYPI version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - msgraph-beta-sdk 1.0.0rc0 - msgraph-sdk =1.0.0a15, =1.0.0rc1 Source cves: CVE-2026-44503 Source advisory:...

apache-airflow-providers-microsoft-azure (>=11.0.0rc1, <=12.2.2), apimarket (>=3.2.0, <=3.3.1) +6 more potentially affected by CVE-2026-44503 via microsoft-kiota-http (>=1.3.1, <=1.9.2)

microsoft-kiota-http PYPI version =1.3.1, =11.0.0rc1, =3.2.0, =1.0.0, =1.5.0, =3.16.1, =3.16.1, =1.2.0, =1.3.0 Source cves: CVE-2026-44503 Source advisory: OSV:PYSEC-2026-2647...

lakehouse-engine (>=1.17.0, <=1.20.1) potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.6.1)

microsoft-kiota-http PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - lakehouse-engine =1.17.0, =1.20.1 Source cves: CVE-2026-44503 Source advisory: OSV:PYSEC-2026-2647...

CVE-2026-49336: Improper Handling of Case Sensitivity

@microsoft/kiota-http-fetchlibrary provides TypeScript libraries for Kiota-generated API clients. In versions 1.0.0-preview.97 through 1.0.0-preview.101, @microsoft/kiota-http-fetchlibrary's RedirectHandler is documented as stripping Authorization and Cookie from cross-origin redirect targets, bu...

Open Redirect

Overview microsoft-kiota-http is a python HTTP implementation with HTTPX library. Affected versions of this package are vulnerable to Open Redirect in the RedirectHandler function. An attacker can obtain sensitive information such as session cookies, proxy credentials, and API keys by inducing a...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.7.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.7.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.7.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.7.0 ...

apicurio-registry-python-sdk-preview (>=2.4.2, <=2.4.14), apicurioregistrydkpreview (2.4.3) +4 more potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.4.4)

microsoft-kiota-http PYPI version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - apicurio-registry-python-sdk-preview =2.4.2, =2.4.2, =0.1.0, =0.1.0, =0.1.13 Source cves: CVE-2026-44503 Source advisory...

apicurioregistrysdk (2.4.6), lakehouse-engine (>=1.16.0, <=1.16.1) +1 more potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.5.0)

microsoft-kiota-http PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - apicurioregistrysdk 2.4.6 - lakehouse-engine =1.16.0, =1.16.1 - msgraph-sdk 1.0.0a14 Source cves: CVE-2026-44503 Source...

msgraph-beta-sdk (1.0.0rc0), msgraph-sdk (>=1.0.0a15, <=1.0.0rc1) potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.6.3)

microsoft-kiota-http PYPI version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - msgraph-beta-sdk 1.0.0rc0 - msgraph-sdk =1.0.0a15, =1.0.0rc1 Source cves: CVE-2026-44503 Source advisory:...

apache-airflow-providers-microsoft-azure (>=11.0.0rc1, <=12.2.2), apimarket (>=3.2.0, <=3.3.1) +6 more potentially affected by CVE-2026-44503 via microsoft-kiota-http (>=1.3.1, <=1.9.2)

microsoft-kiota-http PYPI version =1.3.1, =11.0.0rc1, =3.2.0, =1.0.0, =1.5.0, =3.16.1, =3.16.1, =1.2.0, =1.3.0 Source cves: CVE-2026-44503 Source advisory: OSV:GHSA-7J59-V9QR-6FQ9...

apache-airflow-providers-microsoft-azure (>=11.0.0rc1, <=12.2.2), apimarket (>=3.2.0, <=3.3.1) +6 more potentially affected by CVE-2026-44503 via microsoft-kiota-http (>=1.3.1, <=1.9.2)

microsoft-kiota-http PYPI version =1.3.1, =11.0.0rc1, =3.2.0, =1.0.0, =1.5.0, =3.16.1, =3.16.1, =1.2.0, =1.3.0 Source cves: CVE-2026-44503 Source advisory: SNYK:PYTHON-MICROSOFTKIOTAHTTP-16699940...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.3), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.3) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.3)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.3 ...