365center-mcp (>=1.0.0, <=1.4.0), 3d-db (0.1.5) +4692 more potentially affected by CVE-2026-109461 via @azure/msal-node (>=5.0.3, <=7.0.1)

@azure/msal-node NPM version =5.0.3, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =1.0.0, =0.1.0, =0.0.1-alpha.3, =0.0.1, =1.0.0, =0.1.0, =18.0.0-alpha.2, =20.0.0-renovate-fd1892-me5sbqz0 and more Source cves: CVE-2026-109461 Source advisory: SNYK:JS-AZUREMSALNODE-21689163...

365center-mcp (>=1.0.0, <=1.4.0), 3d-db (0.1.5) +4692 more potentially affected by CVE-2026-109461 via @azure/msal-node (>=5.0.3, <=7.0.1)

@azure/msal-node NPM version =5.0.3, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =1.0.0, =0.1.0, =0.0.1-alpha.3, =0.0.1, =1.0.0, =0.1.0, =18.0.0-alpha.2, =20.0.0-renovate-fd1892-me5sbqz0 and more Source cves: CVE-2026-109461 Source advisory: OSV:GHSA-XCX6-JX8P-X3H5...

365center-mcp (>=1.0.0, <=1.4.0), 3d-db (0.1.5) +4692 more potentially affected by CVE-2026-109461 via @azure/msal-node (>=5.0.3, <=7.0.1)

@azure/msal-node NPM version =5.0.3, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =1.0.0, =0.1.0, =0.0.1-alpha.3, =0.0.1, =1.0.0, =0.1.0, =18.0.0-alpha.2, =20.0.0-renovate-fd1892-me5sbqz0 and more Source cves: CVE-2026-109461 Source advisory: GHSA-XCX6-JX8P-X3H5...

Origin Validation Error

Overview @azure/msal-node is a Microsoft Authentication Library for Node Affected versions of this package are vulnerable to Origin Validation Error via the acquireTokenByCode method in ConfidentialClientApplication, which fails to sanitize the caller-supplied authCodePayload before use. An...

@adobe/helix-onedrive-cli (1.11.441), @adobe/helix-onedrive-support (12.4.13) +2 more potentially affected by CVE-2026-109461 via @azure/msal-node (7.0.1)

@azure/msal-node NPM version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @azure/msal-node and may be impacted: - @adobe/helix-onedrive-cli 1.11.441 - @adobe/helix-onedrive-support 12.4.13 - @mcp-sidekick/msx 1.0.0 - @tsg-ailab/dynamics-crm-mc...

2broke2wait (0.1.0), @1percentlabs/onenote-mcp (0.2.0) +2906 more potentially affected by CVE-2026-84003 via @azure/msal-node (>=1.0.0-alpha.5, <=5.5.0)

@azure/msal-node NPM version =1.0.0-alpha.5, =1.0.1, =16.0.5-feature-9fd817-lpv4shs1, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-84003 Source advisory: MEND:CVE-2026-84003...

org.webjars.npm:adal-node (0.1.28), org.webjars.npm:azure__msal-node (1.5.0) +7 more potentially affected by CVE-2025-65945 via org.webjars.npm:jws (>=3.2.2, <=4.0.0)

org.webjars.npm:jws MAVEN version =3.2.2, =1.6.1, =2.3.2, =5.5.4, =0.0.1, =1.0.0 Source cves: CVE-2025-65945 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14188254...

@adinsure-ops/ops-cli (>=5.3.2, <=5.4.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =5.3.2, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

@adinsure-ops/ops-cli (>=5.3.2, <=5.4.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =5.3.2, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: GHSA-M5VV-6R4H-3VJ9...

@adinsure-ops/ops-cli (>=5.3.2, <=5.4.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =5.3.2, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: MEND:CVE-2024-35255...