Skip to content

PatchFirst · Latest vulnerabilities

@azure/msal-node vulnerabilities

Vulnerabilities published for @azure/msal-node in the last 30 days: 1. Listed in the KEV catalogue: 0.

Vulnerabilities: 2

CVE-2026-109461
Medium · CVSS 5.9EPSS 0.35%Fix available
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
@azure/msal-node Node.js
- Update to 7.1.0
Published October 16, 2026Updated October 23, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2024-35255
Medium · CVSS 5.5EPSS 0.83%Fix available
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
@azure/msal-node Node.js
- Update to 2.9.2
Published June 11, 2024Updated August 10, 2026
Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →