Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

nuget

Microsoft.OpenAPI.Kiota.Builder

nuget

The core engine behind the OpenAPI based client generator.

View on github.com · View on nuget.org

Security Advisories for Microsoft.OpenAPI.Kiota.Builder in nuget

High
about 1 month ago

Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName GSA_kwCzR0hTQS00dnY3LWpqMjUtNGdoNs4ABfqm

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Critical
about 1 month ago

Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info` GSA_kwCzR0hTQS1ocTlxLTI3ZzUtcXdwas4ABfql

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
about 1 month ago

Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF GSA_kwCzR0hTQS00cmo2LXZyd3Ytd3I4bc4ABfqk

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
about 1 month ago

Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref GSA_kwCzR0hTQS1yZzRoLWZwY3AtMnFtOM4ABfqj

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Critical
about 1 month ago

Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions GSA_kwCzR0hTQS00andmLW00d2ctOHA2Ns4ABfqi

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
about 1 month ago

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator GSA_kwCzR0hTQS1qcXdoLTUyNmgtYzkyas4ABfqc

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
about 1 month ago

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator GSA_kwCzR0hTQS03ZjNqLWo3amotcjN2cs4ABfqb

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota, Microsoft.OpenAPI.Kiota.Builder, Microsoft.OpenAPI.Kiota
High
about 1 month ago

Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator GSA_kwCzR0hTQS14ZzJoLTV4cjItMjlqd84ABfqa

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota, Microsoft.OpenAPI.Kiota.Builder, Microsoft.OpenAPI.Kiota
High
about 1 month ago

Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection GSA_kwCzR0hTQS0zaHJmLTJnYzItbXgzMs4ABfpr

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
5 months ago

Kiota: Code Generation Literal Injection GSA_kwCzR0hTQS0yaHgzLXZwNnItbWczZs4ABVTs

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota

Filter by Severity

High 8 Critical 2