{"vulnerability": "CVE-2026-59860", "sightings": [{"uuid": "f0385219-52ac-40a6-8a65-ef8c1b2add7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrmthsmaf2l", "content": "CVE-2026-59860 - Kiota: XML Doc-Comment Newline Breakout Code Injection\nCVE ID : CVE-2026-59860\n \n Published : July 16, 2026, 3:16 p.m. | 18\u00a0minutes ago\n \n Description : Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.3, Kiota is affected by a code-generati...", "creation_timestamp": "2026-07-16T16:11:55.587474Z"}, {"uuid": "6eb7e480-9b54-4fbe-93c8-9734dd1dbff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrftsuervb2e", "content": "CVE-2026-59860 - kiota\nKiota's code generator can inject malicious code into C# clients if an attacker inserts newline characters into an OpenAPI description. This can happen when an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kiota #microsoft #dotnet #CVE #infosec", "creation_timestamp": "2026-07-24T17:10:06.172417Z"}]}