microsoft identity client for nodejs vulnerabilities

Latest microsoft identity client for nodejs CVEs

Newest publication first

1. CVE-2026-109461 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

   Published 2026-10-16

   Medium·CVSS 5.9 EPSS 0.36%

   Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.