Skip to content
OpenAdvisories

Product · Microsoft

Microsoft.OpenApi.Kiota

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-105796

    Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

    Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and pla…

    Microsoft kiota Microsoft.OpenApi.Kiota Microsoft.OpenApi.Kiota.Builder NuGet