Product

microsoft authentication library for node.js vulnerabilities

1 published CVE affecting microsoft authentication library for node.js, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest microsoft authentication library for node.js CVEs

Newest publication first

CVE-2026-84003 Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
Published 2026-09-08

HighCVSS 7.4 EPSS 0.60%

Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.