Vulnerability in Malach-it Boruta-server
CVE-2026-53661
Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.9.1, boruta session cookies and the identity “remember me” cookie were set with…
EPSS: 0.003 (17.5th percentile) — read the EPSS interpretation.
Affected products
- Malach-it Boruta-server — versions < 0.9.1
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)