MSAL Vulnerability Details : CVE-2024-35255

[cr45h0v3rwr173]

What happened?

Hi Sry i dont know were to report this. i like to find out why the new Version of the Agent still uses some dll that are reported with a Vulnerability?
Vulnerability Details : CVE-2024-35255

Versions

Newest

Environment type (Please select at least one enviroment where you face this issue)

• Self-Hosted
• Microsoft Hosted
• VMSS Pool
• Container

Azure DevOps Server type

Azure DevOps Server (Please specify exact version in the textbox below)

Azure DevOps Server Version (if applicable)

No response

Operation system

No response

Version controll system

No response

Relevant log output

No response

[DenisNikulin5]

Hi @cr45h0v3rwr173. Thanks for reporting!
This will be fixed in the next version of the agent - #4910

[kirill-ivlev]

Closing issue since fix merged to the codebase.