Malach-it Boruta vulnerabilities
- malach-it boruta-server Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2 7.1 High
- malach-it boruta-server Boruta: OAuth credentials exposed in Boruta business logs 6.5 Medium
- malach-it boruta Boruta accepts expired JWT client assertions due to missing exp claim validation 9.1 Critical
- malach-it boruta Boruta dynamic client registration allows creation of over-privileged OAuth clients 8.3 High
- malach-it boruta Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching 6.9 Medium
- malach-it boruta-server boruta-server sent sensitive session cookies without the Secure attribute 8.8 High