boruta vulnerabilities

2 known vulnerabilities in boruta from Malach-it. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  boruta: Improper Isolation or Compartmentalization

  CVE-2026-65635Jul 30, 2026Malach-it

  Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attackers to register OpenID Connect clients with administrative privileges through the dynamic client registration entry point. Boruta.Openid.reg

• 9.1 Critical severity

  boruta: Authentication Bypass by Capture-replay

  CVE-2026-53431Jul 30, 2026Malach-it

  Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attacker who has obtained a previously valid JWT client assertion to authenticate as the issuing OAuth client after the assertion has expired. Boruta accepts JWT-based client a