[FP]: com.microsoft.kiota/microsoft-kiota-http-okHttp matching microsoft:kiota CPE

[labkey-tchad]

Package URl

pkg:maven/com.microsoft.kiota/microsoft-kiota-http-okHttp@1.9.0

CPE

cpe:2.3:a:microsoft:kiota:1.9.0:::::::*

CVE

CVE-2026-41134

ODC Integration

{"label" => "Gradle Plugin"}

ODC Version

12.2.2

Description

Conflating Kiota Java Libraries with Kiota SDK

[github-actions]

Maven Coordinates

<dependency>
  <groupId>com.microsoft.kiota</groupId>
  <artifactId>microsoft-kiota-http-okHttp</artifactId>
  <version>1.9.0</version>
</dependency>

Suppression rule:

<suppress base="true">
    <notes><![CDATA[
    FP per issue #8538
    ]]></notes>
    <packageUrl regex="true">^pkg:maven/com\.microsoft\.kiota/microsoft-kiota-http-okHttp@.*$</packageUrl>
    <cpe>cpe:/a:microsoft:kiota:</cpe>
</suppress>

Link to test results: https://github.com/dependency-check/DependencyCheck/actions/runs/26244479186

[github-actions]

Maven Coordinates

<dependency>
  <groupId>com.microsoft.kiota</groupId>
  <artifactId>microsoft-kiota-http-okHttp</artifactId>
  <version>1.9.0</version>
</dependency>

Suppression rule:

<suppress base="true">
    <notes><![CDATA[
    FP per issue #8538
    ]]></notes>
    <packageUrl regex="true">^pkg:maven/com\.microsoft\.kiota/microsoft-kiota-http-okHttp@.*$</packageUrl>
    <cpe>cpe:/a:microsoft:kiota:</cpe>
</suppress>

Link to test results: https://github.com/dependency-check/DependencyCheck/actions/runs/26245151790

[github-actions]

Maven Coordinates

<dependency>
  <groupId>com.microsoft.kiota</groupId>
  <artifactId>microsoft-kiota-http-okHttp</artifactId>
  <version>1.9.0</version>
</dependency>

Suppression rule:

<suppress base="true">
    <notes><![CDATA[
    FP per issue #8538
    ]]></notes>
    <packageUrl regex="true">^pkg:maven/com\.microsoft\.kiota/microsoft-kiota-http-okHttp@.*$</packageUrl>
    <cpe>cpe:/a:microsoft:kiota:</cpe>
</suppress>

Link to test results: https://github.com/dependency-check/DependencyCheck/actions/runs/26245740519