CVE: Bearer token and Cookie leak across origin on redirect in @microsoft/kiota-http-fetchlibrary

github.com 2026-06-20查看中文 →

Security AdvisoryHighMicrosoft

Affected:

@microsoft/kiota-http-fetchlibrary >= 1.0.0-preview.97 and < 1.0.0-preview.102

Fixed in:

@microsoft/kiota-http-fetchlibrary >= 1.0.0-preview.102

Referenced CVEs: CVE-2026-49336

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Apache Airflow GCS Component Path Traversal Vulnerability Fix Guide 2026-07-06 hpack Elixir HTTP/2 HPACK Integer Decoding DoS Vulnerability (CVSS 8.7) 2026-07-06 HPACK Integer Decoding DoS via Unbounded Continuation Octets (CVE-2026-5022) 2026-07-06 Rancher Fleet SSRF Vulnerability in Helm Repo Auth (CVE-2026-44936) 2026-07-06 SUSE Rancher Unauthenticated Webhook Regex Injection via Unsanitized URL (GHSA-jm4-m79g-g72r) 2026-07-06

Offline Archive

Offline screenshot & PDF are Pro-exclusive