En resumen
- CVE-2026-109461 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a @azure/msal-node.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.36%, mayor que el 30.1% de las vulnerabilidades.
- Solución: actualizar a 7.1.0 o posterior.
| Package | Affected versions | Patched versions |
|---|
| @azure/msal-node npm | ≥ 5.0.0-beta.0, < 7.1.0
| 7.1.0
|
Description
Impact
Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network. This affects the auth_code flow.
Patches
Version 7.1.0 and higher are patched.
Workarounds
Ensure you pass in only the auth_code to to acquireTokenByCode
NVD description
Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
Más vulnerabilidades de @azure/msal-node
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free