{"package":"azure.identity","ecosystem":"pypi","latest_version":"1.25.3","description":"Microsoft Azure Identity Library for Python","license":"","license_risk":"unknown","commercial_use_notes":"No license declared in registry metadata — verify manually before commercial use.","homepage":"https://pypi.org/project/azure-identity/","repository":"","downloads_weekly":0,"health":{"score":58,"risk":"high","breakdown":{"maintenance":20,"popularity":0,"security":23,"maturity":15,"community":0},"deprecated":false,"max_score":100},"vulnerabilities":{"count":1,"critical":0,"high":0,"medium":1,"low":0,"details":[{"vuln_id":"CVE-2024-35255","severity":"medium","summary":"Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability","affected_versions":"<1.16.1|<4.2.1|<1.12.2|>=2.7.0,<2.9.2|>=4.49.1,<4.60.4|<1.6.0-beta.4.0.20240610221955-50774cd97099|>=1.14.4-beta,<1.15.1|<1.11.4|>=4.61.0,<4.61.3|=1.0.0|=1.0.0b1|=1.0.0b2|=1.0.0b3|=1.0.0b4|=1.0.1|=1.1.0|=1.10.0|=1.10.0b1|=1.11.0|=1.11.0b1|=1.11.0b2|=1.11.0b3|=1.12.0|=1.12.0b1|=1.12.0b2|=1.13.0|=1.13.0b1|=1.13.0b2|=1.13.0b3|=1.13.0b4|=1.14.0|=1.14.0b1|=1.14.0b2|=1.14.1|=1.15.0|=1.15.0b1|=1.15.0b2|=1.16.0|=1.16.0b1|=1.16.0b2|=1.2.0|=1.3.0|=1.3.1|=1.4.0|=1.4.0b1|=1.4.0b2|=1.4.0b3|=1.4.0b4|=1.4.0b5|=1.4.0b6|=1.4.0b7|=1.4.1|=1.5.0|=1.5.0b1|=1.5.0b2|=1.6.0|=1.6.0b1|=1.6.0b2|=1.6.0b3|=1.6.1|=1.7.0|=1.7.0b1|=1.7.0b2|=1.7.0b3|=1.7.0b4|=1.7.1|=1.8.0|=1.8.0b1|=1.9.0|=1.9.0b1|=1.0.0|=1.0.0-preview.1|=1.0.0-preview.2|=1.0.0-preview.3|=1.0.0-preview.4|=1.0.0-preview.5|=1.0.1|=1.0.2|=1.0.3|=1.0.4|=1.0.5|=1.0.6|=1.0.7|=1.0.8|=1.0.9|=1.1.0|=1.1.0-beta.1|=1.1.0-beta.2|=1.1.0-beta.3|=1.1.0-beta.4|=1.1.0-beta.5|=1.1.0-beta.6|=1.1.0-beta.7|=1.1.1|=1.1.2|=1.1.3|=1.10.0|=1.10.0-beta.1|=1.10.1|=1.10.2|=1.10.3|=1.10.4|=1.11.0|=1.11.0-beta.1|=1.11.0-beta.2|=1.11.1|=1.11.2|=1.11.3|=1.11.4|=1.12.0|=1.12.0-beta.1|=1.12.1|=1.2.0|=1.2.0-beta.1|=1.2.0-beta.2|=1.2.1|=1.2.2|=1.2.3|=1.2.4|=1.2.5|=1.3.0|=1.3.0-beta.1|=1.3.0-beta.2|=1.3.1|=1.3.2|=1.3.3|=1.3.4|=1.3.5|=1.3.6|=1.3.7|=1.4.0|=1.4.0-beta.1|=1.4.1|=1.4.2|=1.4.3|=1.4.4|=1.4.5|=1.4.6|=1.5.0|=1.5.0-beta.1|=1.5.0-beta.2|=1.5.1|=1.5.2|=1.5.3|=1.5.4|=1.5.5|=1.6.0|=1.6.0-beta.1|=1.6.1|=1.7.0|=1.7.0-beta.1|=1.7.0-beta.2|=1.7.1|=1.7.2|=1.7.3|=1.8.0|=1.8.0-beta.1|=1.8.1|=1.8.2|=1.8.3|=1.9.0|=1.9.0-beta.1|=1.9.0-beta.2|=1.9.0-beta.3|=1.9.1|=1.9.2|=4.49.1|=4.50.0|=4.51.0|=4.52.0|=4.53.0|=4.54.0|=4.54.1|=4.55.0|=4.55.0-TestPackage|=4.56.0|=4.57.0|=4.58.0|=4.58.1|=4.59.0|=4.59.1|=4.60.0|=4.60.0-netonly|=4.60.1|=4.60.2|=4.60.3|=1.14.4-beta|=1.15.0|=1.0.0|=1.1.0|=1.1.1|=1.10.0|=1.10.1|=1.10.2|=1.10.3|=1.10.4|=1.11.0|=1.11.1|=1.11.2|=1.11.3|=1.2.0|=1.2.1|=1.2.2|=1.2.3|=1.3.0|=1.4.0|=1.4.1|=1.5.0|=1.6.0|=1.6.1|=1.7.0|=1.8.0|=1.8.1|=1.8.2|=1.9.0|=4.61.0|=4.61.1|=4.61.2","fixed_version":"4.61.3","source":"osv","published_at":"2024-06-11T18:30:50Z","in_kev":false,"epss_prob":0.00221,"epss_percentile":0.44541,"threat_tier":"theoretical"}],"actively_exploited_count":0,"likely_exploited_count":0},"versions":{"latest":"1.25.3","total_count":83,"recent":["1.17.0b2","1.17.0","1.17.1","1.18.0b1","1.18.0b2","1.18.0","1.19.0","1.20.0","1.21.0","1.22.0","1.23.0","1.23.1","1.24.0b1","1.24.0","1.25.0","1.25.1","1.25.2","1.25.3","1.26.0b1","1.26.0b2"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":0,"first_published":null,"last_published":"2026-03-13T01:12:22.951763Z","dependencies_count":5,"dependencies":["azure-core>=1.31.0","cryptography>=2.5","msal>=1.35.1","msal-extensions>=1.2.0","typing-extensions>=4.0.0"]},"github_stats":null,"bundle":null,"typescript":null,"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"1.25.3","version_hint":"Update to >= 4.61.3 to fix known vulnerabilities","summary":"azure.identity@1.25.3 is safe to use (health: 58/100)"},"version_scoped":null,"requested_version":null,"_cache":"miss","_response_ms":758,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":20,"first_release_age_days":null,"last_release_days_ago":49,"avg_days_between_releases":null,"release_velocity":"active"},"popularity_warning":{"this_ecosystem_downloads":0,"more_popular_in":{"ecosystem":"nuget","downloads_weekly":8027616},"hint":"This is the pypi package 'azure.identity' (0 dl/week). A much more popular package with the same name exists in nuget (8,027,616 dl/week). Confirm you queried the right ecosystem."}}