This package contains the binaries of the Microsoft Authentication Library for .NET (MSAL.NET). MSAL.NET makes it easy to obtain tokens from the Microsoft identity platform for developers (formerly Azure AD v2.0) signing-in users with work & school accounts, Microsoft personal accounts, and social identities via Azure AD B2C. These tokens provide access to Microsoft Cloud API and any other API secured by the Microsoft identity platform. This version supports adding authentication functionality to your .NET based clients - .NET, .NET Framework, .NET MAUI
97%
Total Score
100
83
100
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10042 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. Microsoft.Identity.Client is vulnerable to Insertion of Sensitive Information into Log File in versions 4.13.0 - 4.80.0. | 4.13.0 - 4.80.0 | Low |
CVE-2024-27086 Microsoft.Identity.Client is vulnerable to Incorrect Authorization in versions 4.48.0 - 4.59.1 and 4.60.0 - 4.60.3. | 4.48.0 - 4.59.14.60.0 - 4.60.3 | Low |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
microsoft.identitymodel.abstractions Version [8.14.0, ) | — | — |
system.diagnostics.diagnosticsource Version [6.0.1, ) | — | — |
system.formats.asn1 Version [8.0.1, ) | — | — |
system.text.json Version [6.0.10, ) | — | — |
system.valuetuple Version [4.5.0, ) | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant