If you find a security issue with our libraries or services please report it to the Microsoft Security Response Center (MSRC) with as much detail as possible. Your submission may be eligible for a bounty through the Microsoft Bounty program. Please do not post security issues to GitHub Issues or any other public site. We will contact you shortly upon receiving the information. We encourage you to get notifications of when security incidents occur by visiting this page and subscribing to Security Advisory Alerts.
Repository navigation
Security: AzureAD/microsoft-authentication-library-for-js
Security
SECURITY.md
-
MSAL Node authorization code flow may disclose parameters to an attacker-controlled endpointGHSA-xcx6-jx8p-x3h5 published
Oct 16, 2026 by bgavrilMSModerate
Learn more about advisories related to AzureAD/microsoft-authentication-library-for-js in the GitHub Advisory Database