Microsoft.Graph.Core 3.2.5 depends on Microsoft.Kiota.Abstractions 1.21.1 which has a known high severity vulnerability

Describe the bug

Microsoft.Graph.Core 3.2.5 has a transitive/direct dependency on Microsoft.Kiota.Abstractions 1.21.1, which contains a known high-severity vulnerability. This causes build failures in projects that treat warnings as errors (<TreatWarningsAsErrors>true</TreatWarningsAsErrors>), and is a security concern for all consumers of the SDK.

Expected behavior

Microsoft.Graph.Core should depend on a version of Microsoft.Kiota.Abstractions that has no known vulnerabilities. The latest safe version (2.0.0) is already available on NuGet and should be adopted.

How to reproduce

1. Create a .NET project with <TreatWarningsAsErrors>true</TreatWarningsAsErrors> in the Application.csproj.
2. Add a reference to Microsoft.Graph.Core 3.2.5.
3. Run dotnet restore or dotnet build.
4. Observe the build error:

Warning As Error: Package 'Microsoft.Kiota.Abstractions' 1.21.1 has a known high severity vulnerability,
https://github.com/advisories/GHSA-7j59-v9qr-6fq9

SDK Version

3.2.5

Latest version known to work for scenario above?

No response

Known Workarounds

1. Simple Fix - <TreatWarningsAsErrors>false</TreatWarningsAsErrors>

OR

1. Enable Transitive Package Pinning: Add <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled> to allow overriding transitive dependency versions in Central Package Management.
2. Fix the Kiota Vulnerability: Add version overrides for all Microsoft.Kiota.* packages to version 2.0.0 to fix the high-severity vulnerability (GHSA-7j59-v9qr-6fq9):

•	Microsoft.Kiota.Abstractions
•	Microsoft.Kiota.Authentication.Azure
•	Microsoft.Kiota.Http.HttpClientLibrary
•	Microsoft.Kiota.Serialization.Form
•	Microsoft.Kiota.Serialization.Json
•	Microsoft.Kiota.Serialization.Multipart
•	Microsoft.Kiota.Serialization.Text

Debug output

Warning As Error: Package 'Microsoft.Kiota.Abstractions' 1.21.1 has a known high severity vulnerability, https://github.com/advisories/GHSA-7j59-v9qr-6fq9

Locate the dependency declarations for Microsoft.Graph.Core and the listed Microsoft.Kiota packages, then inspect how their versions are managed. Restore and build a project with TreatWarningsAsErrors enabled; done means the dependencies use safe versions and the GHSA-7j59-v9qr-6fq9 warning no longer appears.