https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:22:01 +0000 https://cve.radiocsirt.org/vuln/cve-2026-59865 <p><strong>Affected:</strong> microsoft kiota</p> <p>Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota info` read x-ms-kiota-info.languagesInformation.&lt;language&gt;.dependencyInstallCommand plus dependency name and version values from an OpenAPI description and presented the spec-supplied command as Kiota&#39;s recommended install command, allowing an attacker-controlled or compromised description to cause command injection when the suggested command was run manually or through the Kiota VS Code extension&#39;s kiota info --json dependency-install flow. This issue is fixed in version 1.29.1 and 1.32.5.</p> <p><strong>Affected:</strong> microsoft kiota</p> <p>Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota info` read x-ms-kiota-info.languagesInformation.&lt;language&gt;.dependencyInstallCommand plus dependency name and version values from an OpenAPI description and presented the spec-supplied command as Kiota&#39;s recommended install command, allowing an attacker-controlled or compromised description to cause command injection when the suggested command was run manually or through the Kiota VS Code extension&#39;s kiota info --json dependency-install flow. This issue is fixed in version 1.29.1 and 1.32.5.</p> https://cve.radiocsirt.org/vuln/cve-2026-59865