Vulnerability Database - OSV

CVE-2026-44503

github.com/microsoft/kiota-java

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect 14 May

Fix available
Severity - 7.0 (High)

CLEANSTART-2026-DB48135

CleanStart/airflow-2
CleanStart/airflow-3
CleanStart/vault

Security fix for CVE-2026-44503 applied in: airflow-2 2.10.3-r0, airflow-2 2.11.0-r2, airflow-3 3.0.6-r1, airflow-3 3.1.6-r2, vault 1.20.4-r4, vault 1.21.4-r4, vault 2.0.0-r1 18 Sep

Fix available

PYSEC-2026-2647

PyPI/microsoft-kiota-http

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect 13 Jul

Fix available
Severity - 7.0 (High)

MINI-56g5-7v32-5c2q

MinimOS/rancher-agent-2.14

See record for full details 03 Jul

Fix available

MINI-6pfv-4q29-xmqm

MinimOS/rancher-agent-fips-2.12

See record for full details 03 Jul

Fix available

MINI-m6gm-rm3v-4gf2

MinimOS/rancher-agent-2.12

See record for full details 03 Jul

Fix available

MINI-pj7h-r3jh-m3p3

MinimOS/rancher-agent-2.13

See record for full details 03 Jul

Fix available

MINI-q6hc-7m7f-xp2g

MinimOS/rancher-agent-fips-2.13

See record for full details 03 Jul

Fix available

MINI-qjwp-2whr-7755

MinimOS/rancher-agent-fips-2.14

See record for full details 03 Jul

Fix available

MINI-w5g5-qc9c-7h5c

MinimOS/rancher-agent-fips-2.11

See record for full details 03 Jul

Fix available

MINI-x6q5-vxv7-8v2h

MinimOS/rancher-agent-2.11

See record for full details 03 Jul

Fix available

ECHO-0e0d-c481-2581

Echo:PyPI/microsoft-kiota-http

See record for full details 01 Jul

Fix available

GO-2026-5224

Go/github.com/microsoft/kiota-http-go

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect in github.com/microsoft/kiota-http-go 25 Jun

Fix available

MINI-85f8-245x-cmcg

MinimOS/azure-service-operator-fips

See record for full details 18 Jun

Fix available

MINI-jqw7-rhh8-pr3w

MinimOS/vault

See record for full details 14 May

Fix available

MINI-pw6f-r49g-m44x

MinimOS/vault-fips

See record for full details 14 May

Fix available