graph vulnerabilities
CVEs whose affected-version data names the graph package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-49159Medium· 6.5Microsoft Graph Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
▾ SunlitMicrosoft · Microsoft GraphEPSS 1.00%via CVEORG
CVE-2026-47655Medium· 6.5Microsoft Graph Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
▾ SunlitMicrosoft · Microsoft GraphEPSS 0.76%via CVEORG