pypi package report

Is azure-identity safe?

1 known vulnerability, worst severity MODERATE.

// reach

6 direct dependencies

2 carry known advisories, worst HIGH

166 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade

// ai model usage

No published models are known to use this package.

cvss

5.5

medium

CVSS v3.1 base score out of 10

epss

0.83%

medium

chance of exploitation in 30 days, 58th percentile of all CVEs

xyz score

3.6

low

CyberXYZ composite out of 10

fig. 01 — GHSA-m5vv-6r4h-3vj9, the advisory selected below

// 1 advisories

GHSA-m5vv-6r4h-3vj9

MODERATEGitHub ratingCVE-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

// cvss v3.1 vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack vector: Local
Attack complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

Checked 2026-11-06 at 23:32 UTC. The most recent advisory here was published 2024-06-11. Updated continuously from NVD, GHSA, OSV and CNA feeds.