Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2024-35255 — MEDIUM severity vulnerability | Release Alert

CVE-2024-35255

5.5

MEDIUMCVSS v3

Published

June 11, 2024

Affected

4 projects

Assigned by

[email protected]

Severity scale

010

Description

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

@azure/identity

NPMProvides credential implementations for Azure SDK libraries that can authenticate with Microsoft Entra ID

< 1.16.1, < 4.2.1, < 1.11.4OSV

@azure/msal-node

NPMMicrosoft Authentication Library for Node

>= 2.7.0, < 2.9.2OSV

More on this CVE

NVD↗GitHub Advisory↗

Python Package Index

Microsoft Azure Identity Library for Python

< 1.16.1, < 4.2.1, < 1.11.4OSV

NuGet GalleryProvides APIs for authenticating to Microsoft Entra ID

< 1.16.1, < 4.2.1, < 1.11.4OSV