kiota
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 16, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref
Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName
Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions
Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`
Kiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRF
Kiota: Code Generation Literal Injection in the Python Generator
Kiota: XML Doc-Comment Newline Breakout Code Injection
Monitor kiota in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.