Microsoft Authentication Library For Node.js CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-109461

Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Authentication Library For Node.js Microsoft Identity Client For Nodejs

CVE-2026-84003

Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability

Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure\/msal-node Microsoft Authentication Library For Node.js

Page 1 of 1.