Microsoft Typescript vulnerabilities

• microsoft kiota-typescript @microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter CVE-2026-49336 Fix available 5.5 MediumJune 19, 2026
• microsoft kiota-java, microsoft-kiota-http, github.com/microsoft/kiota-http-go +3 more +5 more Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect CVE-2026-44503 Fix available 7.0 HighMay 7, 2026
• microsoft common data model sdk, common data model sdk for c#, common data model sdk for java +2 more +4 more Microsoft Common Data Model SDK Denial of Service Vulnerability CVE-2023-36566 Fix available 6.5 MediumOctober 10, 2023
• microsoft visual studio code, azure storage explorer, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +5 more +7 more An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they... CVE-2020-1416 8.8 HighJuly 14, 2020