@azure/msal-node@1.16.0 vulnerabilities
Microsoft Authentication Library for Node
-
latest version
2.13.1
-
latest non vulnerable version
-
first published
4 years ago
-
latest version published
9 days ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the @azure/msal-node package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
@azure/msal-node is a Microsoft Authentication Library for Node Affected versions of this package are vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in the authentication process. An attacker can elevate privileges by exploiting race conditions during the token validation steps. This is only exploitable if the application is configured to use multiple threads or processes for handling authentication requests. Notes:
How to fix Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')? Upgrade |
<2.9.2
|