microsoftgraph / microsoftgraph/msgraph-sdk-dotnet-core

Create release pointing to CVE-2026-44503 unaffected Microsoft.Kiota.Abstractions

Open
#1,046 2 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

status:waiting-for-triage
Dominant language
C#
Stars
164
Forks
65
Avg merge
38m
Merged PRs (30d)
1

Description

Hi,

you already updated Microsoft.Kiota.Abstractions to 1.22.1 in #1027, which should be unaffected by https://github.com/advisories/GHSA-7j59-v9qr-6fq9 but haven't created a release yet. There also is #1045 to update the Kiota-dependencies to 1.22.2.

Could you please create a release, so we don't need to override 7 transient dependencies?

Thank you

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review issue #1027 to confirm the Microsoft.Kiota.Abstractions 1.22.1 update, and check #1045 for the related dependency work. Find the repository’s release procedure, create the release containing the unaffected dependency update, and verify that consumers no longer need the seven transient dependency overrides.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
release, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.