CVE-2026-109461 — Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

An origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network. The vulnerability affects the auth_code flow.