A vulnerability in azure_security_keyvault_secrets versions 0.10.0 through 1.0.0 allows rejected authentication challenges to poison the Key Vault scope cache. This can cause subsequent requests to reuse a cached scope without proper verification, potentially disclosing bearer tokens and request bodies to attacker-controlled endpoints. The issue is fixed in version 1.0.1 and later.