Microsoft Microsoft.openapi.kiota
2 CVEs affecting Microsoft Microsoft.openapi.kiota. Latest disclosed: 2026-10-06. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-105796 | High | 8.8 | 2026-10-06 | Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment termi… |
CVE-2026-105795 | Low | 3.1 | 2026-10-06 | Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_semantics.oauth_card_path from an attac… |