Skip to content
OpenAdvisories

Package · Hex

boruta

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-65635

    Boruta dynamic client registration allows creation of over-privileged OAuth clients

    Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attackers to register OpenID Connect clients with administrative privileges through the dynamic client registration entry point. Boruta.Openid.re…

    malach-it boruta boruta Hex