{"action":"Upgrade react-adal to 0.5.1 or later.","affected":[{"fixed":"0.5.1","introduced":"0"}],"component":"react-adal","cve_ids":["CVE-2020-7787"],"ecosystem":"npm","epss":0.01282,"exploited":false,"fixed_versions":["0.5.1"],"ghsa_id":"GHSA-7mpx-vg3c-cmr4","id":"tcs_01M5KFADYHJY78KJ5WGAYCXGX5","modified_at":"2026-03-13T22:11:11.416389Z","published_at":"2021-04-13T15:22:37Z","references":["https://osv.dev/vulnerability/GHSA-7mpx-vg3c-cmr4","https://nvd.nist.gov/vuln/detail/CVE-2020-7787","https://github.com/salvoravida/react-adal/pull/115","https://github.com/salvoravida/react-adal/commit/74158dba1647b12fe96fa401e306a6287fe9e2a9","https://snyk.io/vuln/SNYK-JS-REACTADAL-1018907"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-7mpx-vg3c-cmr4","url":"https://osv.dev/vulnerability/GHSA-7mpx-vg3c-cmr4"}],"summary":"Improper Authentication in react-adal"}