2.16.2
4 years ago
26 days ago
Known vulnerabilities in the @azure/msal-node package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
@azure/msal-node is a Microsoft Authentication Library for Node Affected versions of this package are vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in the authentication process. An attacker can elevate privileges by exploiting race conditions during the token validation steps. This is only exploitable if the application is configured to use multiple threads or processes for handling authentication requests. Notes:
How to fix Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')? Upgrade | <2.9.2 |