MEDIUM5.5

GHSA-m5vv-6r4h-3vj9

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Quick fix

GHSA-m5vv-6r4h-3vj9 — azure-identity: upgrade to the fixed version with the command below.

pip install --upgrade 'azure-identity>=1.16.1'

Details

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

Enter the version of the package you're using.

Introduced in: 0Fixed in: 1.16.1

Fixpip install --upgrade 'azure-identity>=1.16.1'

Introduced in: 0Fixed in: 4.2.1

Fixnpm install @azure/identity@4.2.1

Introduced in: 0Fixed in: 1.12.2

Fix# pom.xml: bump <version>1.12.2</version> for com.azure:azure-identity

Introduced in: 2.7.0Fixed in: 2.9.2

Fixnpm install @azure/msal-node@2.9.2

Introduced in: 4.49.1Fixed in: 4.60.4

Fixdotnet add package Microsoft.Identity.Client --version 4.60.4

Introduced in: 0Fixed in: 1.6.0-beta.4.0.20240610221955-50774cd97099

Fixgo get github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.6.0-beta.4.0.20240610221955-50774cd97099

Introduced in: 1.14.4-betaFixed in: 1.15.1

Fix# pom.xml: bump <version>1.15.1</version> for com.microsoft.azure:msal4j

Introduced in: 0Fixed in: 1.11.4

Fixdotnet add package Azure.Identity --version 1.11.4

Introduced in: 4.61.0Fixed in: 4.61.3

Fixdotnet add package Microsoft.Identity.Client --version 4.61.3