What’s Vulnerable › Products

malach-it boruta vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your malach-it boruta version is affected

Latest malach-it boruta vulnerabilities

• CVE-2026-65635 — Boruta dynamic client registration allows creation of over-privileged OAuth clients (CVSS 8.3)
• CVE-2026-54885 — Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching (CVSS 6.9)
• CVE-2026-53431 — Boruta accepts expired JWT client assertions due to missing exp claim validation (CVSS 9.1)