GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
5 advisories
Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName
High
CVE-2026-59866
was published
for
Microsoft.OpenApi.Kiota
(NuGet)
Jul 24, 2026
Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF
High
CVE-2026-59863
was published
for
Microsoft.OpenApi.Kiota
(NuGet)
Jul 24, 2026
Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref
High
CVE-2026-59867
was published
for
Microsoft.OpenApi.Kiota
(NuGet)
Jul 24, 2026
Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection
High
CVE-2026-59860
was published
for
Microsoft.OpenApi.Kiota
(NuGet)
Jul 24, 2026
Kiota: Code Generation Literal Injection
High
CVE-2026-41134
was published
for
Microsoft.OpenApi.Kiota
(NuGet)
Apr 14, 2026
ProTip!
Advisories are also available from the
GraphQL API