MEDIUMnpm
GHSA-396q-4vc8-28x9· CVE-2026-49336@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter
Modified: 9/10/2026
package
npm/@microsoft/kiota-http-fetchlibrary
pkg:npm/%40microsoft/kiota-http-fetchlibrary