malach-it boruta-server vulnerabilities

3 published CVEs name malach-it boruta-server among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 0
Known exploited: 0

Critical 0High 2Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-49249
Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2
malach-it · boruta-server
High7.1
CVE-2026-55221
Boruta: OAuth credentials exposed in Boruta business logs
malach-it · boruta-server
Medium6.5
CVE-2026-53661
boruta-server sent sensitive session cookies without the Secure attribute
malach-it · boruta-server
High8.8

Most common weaknesses