Product · Microsoft

Microsoft Identity Client for NodeJS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.9

CVE-2026-109461

Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

Microsoft Microsoft Identity Client for NodeJS @azure/msal-node npm

Oct 16, 2026