AzureAD/passport-azure-ad

Releases44

Frequency1 month 2 weeks

Last Release almost 6 years ago

Stars422

The code for Passport Azure AD has been moved to the MSAL.js repo. Please open any issues or PRs at the link below.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2016-7191 ↗	Sep 28, 2016Wednesday, 28 September 2016, 20:59	—	4.3 MEDIUM
The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.