KI
Product
kiota
13
CVEs
0
On KEV
9.3
Max CVSS
2
New 30D
Severity mix
Critical 3High 8Medium 1Low 1
Watch
Add kiota to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105796 | 8.8 | Oct 6 | Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators Affected: >= 0.5.0, < 1.35.0 |
| CVE-2026-59859 | 8.7 | Jul 16 | Kiota: Code Generation Literal Injection in the PHP Generator Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
| CVE-2026-59860 | 8.7 | Jul 16 | Kiota: XML Doc-Comment Newline Breakout Code Injection Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
| CVE-2026-41134 | 7.8 | Apr 22 | Kiota: Code Generation Literal Injection Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
| CVE-2026-59862 | 7.5 | Jul 16 | Kiota: Code Generation Literal Injection in the Python Generator Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
| CVE-2026-59861 | 7.5 | Jul 16 | Kiota: Code Generation Literal Injection in Kiota Ruby Generator Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
| CVE-2026-59867 | 7.1 | Jul 16 | Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
| CVE-2026-59863 | 7.0 | Jul 16 | Kiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRF Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
Showing 8