Skip to content
OpenAdvisories

Package · Hex

boruta

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-54885

    Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching

    Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAuth/OpenID authorization server to issue outbound HTTP requests to attacker-chosen URIs, including internal services and cloud metadata endp…

    malach-it boruta boruta Hex