CVE-2016-7191
1 advisory.
npm/passport-azure-ad CVE-2016-7191: high 8.1, EPSS 29.45%
Authentication Bypass in passport-azure-ad
Action: Upgrade passport-azure-ad to 1.4.6 or later.
npm i passport-azure-ad@1.4.6npm i passport-azure-ad@2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.4.6 | - |
| 2.0.0 | 2.0.1 | - |
Fixed versions
| 1.4.6 | 2.0.1 |
Sources
- osv: GHSA-73jp-3c67-hjfv
- https://nvd.nist.gov/vuln/detail/CVE-2016-7191
- https://github.com/AzureAD/passport-azure-ad
- https://github.com/AzureAD/passport-azure-ad/blob/master/SECURITY-NOTICE.MD
- https://github.com/advisories/GHSA-73jp-3c67-hjfv
- https://support.microsoft.com/en-us/kb/3187742
- https://support.microsoft.com/kb/3187742
- https://www.npmjs.com/advisories/151
- http://www.securityfocus.com/bid/93213
- http://www.securitytracker.com/id/1036996
CVE-2016-7191 · published · modified · JSON