apicurioregistrysdk (2.4.6), lakehouse-engine (>=1.16.0, <=1.16.1) +1 more potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.5.0)

microsoft-kiota-http PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - apicurioregistrysdk 2.4.6 - lakehouse-engine =1.16.0, =1.16.1 - msgraph-sdk 1.0.0a14 Source cves: CVE-2026-44503 Source...

msgraph-beta-sdk (1.0.0rc0), msgraph-sdk (>=1.0.0a15, <=1.0.0rc1) potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.6.3)

microsoft-kiota-http PYPI version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - msgraph-beta-sdk 1.0.0rc0 - msgraph-sdk =1.0.0a15, =1.0.0rc1 Source cves: CVE-2026-44503 Source advisory:...

msgraph-beta-sdk (1.0.0rc0), msgraph-sdk (>=1.0.0a15, <=1.0.0rc1) potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.6.3)

microsoft-kiota-http PYPI version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - msgraph-beta-sdk 1.0.0rc0 - msgraph-sdk =1.0.0a15, =1.0.0rc1 Source cves: CVE-2026-44503 Source advisory:...

CVE-2023-49282

msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained test code that enabled the use of the phpInfo function from any application that could access and execute the file at vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php. The...

CVE-2023-49282

The CVE-2023-49282 issue affects the Microsoft Graph PHP SDK (msgraph-sdk-php) where test code GetPhpInfo.php invokes phpinfo(), exposing system configuration and environment details if the server misconfigures access (e.g., /vendor). Affected versions were patched in 1.109.1 and 2.0.0-RC5. Remed...

CVE-2023-49282: Exposure of Sensitive Information to an Unauthorized Actor

msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained test code that enabled the use of the phpInfo function from any application that could access and execute the file at vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php. The...

TokenTactics - Azure JWT Token Manipulation Toolset

Azure JSON Web Token "JWT" Manipulation Toolset Azure access tokens allow you to authenticate to certain endpoints as a user who signs in with a device code. Even if they used multi-factor authentication. Once you have a user's access token, it may be possible to access certain apps such as...