Microsoft kiota-typescript

• CVE-2026-49336 Medium 5.5 @microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter 0.7%
• CVE-2026-44503 High 7.0 Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect 0.6%