https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 20:15:35 +0000 https://cve.radiocsirt.org/vuln/certfr-2016-avi-340 certfr-2016-avi-340 https://cve.radiocsirt.org/vuln/certfr-2016-avi-340 https://cve.radiocsirt.org/vuln/cnvd-2016-08486 cnvd-2016-08486 https://cve.radiocsirt.org/vuln/cnvd-2016-08486 https://cve.radiocsirt.org/vuln/euvd-2026-86497 EUVD-2026-86497 https://cve.radiocsirt.org/vuln/euvd-2026-86497 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7191 <p>The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.</p> <p>The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-7191 https://cve.radiocsirt.org/vuln/ghsa-73jp-3c67-hjfv <p><strong>Affected:</strong> npm: passport-azure-ad</p> <p>Affected versions of `passport-azure-ad` do not recognize the `validateIssuer` setting, which allows remote attackers to bypass authentication via a crafted token.</p> <p>## Recommendation</p> <p>Version 1.x: Update to version 1.4.6 or later. Version 2.x: Update to version 2.0.1 or later.</p> <p><strong>Affected:</strong> npm: passport-azure-ad</p> <p>Affected versions of `passport-azure-ad` do not recognize the `validateIssuer` setting, which allows remote attackers to bypass authentication via a crafted token.</p> <p>## Recommendation</p> <p>Version 1.x: Update to version 1.4.6 or later. Version 2.x: Update to version 2.0.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-73jp-3c67-hjfv https://cve.radiocsirt.org/vuln/gsd-2016-7191 gsd-2016-7191 https://cve.radiocsirt.org/vuln/gsd-2016-7191