Microsoft Kiota Package Vulnerability: Command Injection Threat
EARLY WARNING · UNCONFIRMED. This page describes a developing threat that 0Day surfaced from early signals and has not yet independently confirmed. Details may change. Always verify against the primary sources before acting.
- Severity
- HIGH
- Affected component
- Microsoft.OpenApi.Kiota (nuget)
- Affected versions
- < 1.31.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.3 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or >= 1.32.0, <= 1.32.0 or >= 1.32.1, <= 1.32.1 or >= 1.32.2, <= 1.32.2 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.5 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or >= 1.32.0, <= 1.32.0 or >= 1.32.1, <= 1.32.1 or >= 1.32.2, <= 1.32.2 or >= 1.32.3, <= 1.32.3 or >= 1.32.4, <= 1.32.4 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.5 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or >= 1.32.0, <= 1.32.0 or >= 1.32.1, <= 1.32.1 or >= 1.32.2, <= 1.32.2 or >= 1.32.3, <= 1.32.3 or >= 1.32.4, <= 1.32.4 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.5 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or >= 1.32.0, <= 1.32.0 or >= 1.32.1, <= 1.32.1 or >= 1.32.2, <= 1.32.2 or >= 1.32.3, <= 1.32.3 or >= 1.32.4, <= 1.32.4 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.0 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.5 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or >= 1.32.0, <= 1.32.0 or >= 1.32.1, <= 1.32.1 or >= 1.32.2, <= 1.32.2 or >= 1.32.3, <= 1.32.3 or >= 1.32.4, <= 1.32.4 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.4 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or >= 1.32.0, <= 1.32.0 or >= 1.32.1, <= 1.32.1 or >= 1.32.2, <= 1.32.2 or >= 1.32.3, <= 1.32.3 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or < 1.34.0 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or >= 1.32.0, <= 1.32.0 or >= 1.32.1, <= 1.32.1 or >= 1.32.2, <= 1.32.2 or >= 1.32.3, <= 1.32.3 or >= 1.32.4, <= 1.32.4 or >= 1.32.5, <= 1.32.5 or >= 1.33.0, <= 1.33.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.5 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or >= 1.32.0, <= 1.32.0 or >= 1.32.1, <= 1.32.1 or >= 1.32.2, <= 1.32.2 or >= 1.32.3, <= 1.32.3 or >= 1.32.4, <= 1.32.4 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1 or >= 1.30.0, < 1.32.0 or >= 1.30.0, <= 1.30.0 or >= 1.31.0, <= 1.31.0 or >= 1.31.1, <= 1.31.1 or < 1.29.1 or >= 0.1.0-preview, <= 0.1.0-preview or >= 0.1.1-preview, <= 0.1.1-preview or >= 0.1.2-preview, <= 0.1.2-preview or >= 0.1.3-preview, <= 0.1.3-preview or >= 0.10.0-preview, <= 0.10.0-preview or >= 0.11.0-preview, <= 0.11.0-preview or >= 0.11.1-preview, <= 0.11.1-preview or >= 0.2.0-preview, <= 0.2.0-preview or >= 0.2.1-preview, <= 0.2.1-preview or >= 0.3.0-preview, <= 0.3.0-preview or >= 0.4.0-preview, <= 0.4.0-preview or >= 0.5.0-preview, <= 0.5.0-preview or >= 0.5.1-preview, <= 0.5.1-preview or >= 0.6.0-preview, <= 0.6.0-preview or >= 0.7.1-preview, <= 0.7.1-preview or >= 0.8.3-preview, <= 0.8.3-preview or >= 0.9.0-preview, <= 0.9.0-preview or >= 1.0.0, <= 1.0.0 or >= 1.0.1, <= 1.0.1 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.1.2, <= 1.1.2 or >= 1.1.3, <= 1.1.3 or >= 1.10.0, <= 1.10.0 or >= 1.10.1, <= 1.10.1 or >= 1.11.0, <= 1.11.0 or >= 1.11.1, <= 1.11.1 or >= 1.12.0, <= 1.12.0 or >= 1.13.0, <= 1.13.0 or >= 1.14.0, <= 1.14.0 or >= 1.15.0, <= 1.15.0 or >= 1.16.0, <= 1.16.0 or >= 1.17.0, <= 1.17.0 or >= 1.18.0, <= 1.18.0 or >= 1.19.0, <= 1.19.0 or >= 1.19.1, <= 1.19.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.20.0, <= 1.20.0 or >= 1.21.0, <= 1.21.0 or >= 1.22.0, <= 1.22.0 or >= 1.22.1, <= 1.22.1 or >= 1.22.2, <= 1.22.2 or >= 1.22.3, <= 1.22.3 or >= 1.23.0, <= 1.23.0 or >= 1.24.0, <= 1.24.0 or >= 1.24.1, <= 1.24.1 or >= 1.24.2, <= 1.24.2 or >= 1.24.3, <= 1.24.3 or >= 1.25.1, <= 1.25.1 or >= 1.26.0, <= 1.26.0 or >= 1.26.1, <= 1.26.1 or >= 1.27.0, <= 1.27.0 or >= 1.28.0, <= 1.28.0 or >= 1.29.0, <= 1.29.0 or >= 1.3.0, <= 1.3.0 or >= 1.4.0, <= 1.4.0 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.6.1, <= 1.6.1 or >= 1.7.0, <= 1.7.0 or >= 1.8.0, <= 1.8.0 or >= 1.8.1, <= 1.8.1 or >= 1.8.2, <= 1.8.2 or >= 1.9.0, <= 1.9.0 or >= 1.9.1, <= 1.9.1
- Patched version
- Not yet available
GHSA-HQ9Q-27G5-QWPJ
An early warning has been issued regarding a vulnerability in the Microsoft Kiota package that could allow command injection. Users of affected versions are advised to take immediate precautions.
What happened
The Microsoft Kiota package has reportedly been compromised through a command injection vulnerability in the x-ms-kiota-info dependencyInstallCommand. This vulnerability could allow an attacker to execute arbitrary commands, leading to remote code execution. The issue was first flagged on July 24, 2026. The vulnerability affects specific versions of Microsoft.OpenApi.Kiota and Microsoft.OpenApi.Kiota.Builder nuget packages.
The affected versions include a wide range of releases, from preview versions to stable releases. The vulnerability has not yet been exploited in the wild, according to the current information. Users are advised to avoid using the `kiota info` command with untrusted OpenAPI descriptions until a patch is available.
What to do about it
- Check your current version of Microsoft.OpenApi.Kiota and Microsoft.OpenApi.Kiota.Builder against the affected version ranges provided.
- Avoid using the `kiota info` command with untrusted OpenAPI descriptions.
- Monitor the provided sources for updates on patches and further information.
- No official fix has been published yet. Continue to monitor the situation and apply any patches as soon as they become available.
How 0Day would have caught this
MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If
Microsoft.OpenApi.Kiota is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You are affected if you are using any of the specified affected versions of Microsoft.OpenApi.Kiota or Microsoft.OpenApi.Kiota.Builder.
What should I do right now?
Check your current versions against the affected ranges and avoid using the `kiota info` command with untrusted OpenAPI descriptions. Monitor the sources for updates on patches.
When will a patch be available?
No official patch has been published yet. Continue to monitor the sources for updates.