malach-it boruta vulnerabilities

3 published CVEs name malach-it boruta among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 1
Known exploited: 0

Critical 1High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-53431
Boruta accepts expired JWT client assertions due to missing exp claim validation
malach-it · boruta
Critical9.1
CVE-2026-65635
Boruta dynamic client registration allows creation of over-privileged OAuth clients
malach-it · boruta
High8.3
CVE-2026-54885
Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching
malach-it · boruta
Medium6.9

Most common weaknesses