Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insufficient Cryptography #2079

Open
Vasanthh143 opened this issue Apr 16, 2024 · 4 comments
Open

Insufficient Cryptography #2079

Vasanthh143 opened this issue Apr 16, 2024 · 4 comments
Projects

Comments

@Vasanthh143
Copy link

Im using this "com.microsoft.identity.client:msal:5.2.1" lib in my app for microsoft CES. For verify the security of my app, I checked my app in Mobsf security software tool. it's showing some high severity issue in this jar.

Kindly look into this and check this case.
microsoft_1
microsoft_2

@negoe
Copy link
Contributor

negoe commented Apr 17, 2024

@Vasanthh143 Are you developing an application for Microsoft organization?

@negoe
Copy link
Contributor

negoe commented Apr 19, 2024

@Vasanthh143 eng team has prioritized this work and we will release an update in our upcoming releases.

@negoe negoe added this to In Progress in Bug Triage Apr 19, 2024
@Vasanthh143
Copy link
Author

Thanks for the update team.

@Vasanthh143
Copy link
Author

Hi team,

Can you please tell me, When can we expect the fix release? and Which version the fix will be released?

Thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Bug Triage
  
In Progress
Development

No branches or pull requests

2 participants