Malach-It

6 CVEs across 2 Malach-It products. Browse Malach-It vulnerabilities, severities, and proof-of-concept exploits.

Malach-It products with known CVEs

ProductCVEs
Boruta3
Boruta-Server3
Malach-It CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-55221Medium6.52026-09-02Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0…
CVE-2026-492492026-09-02Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0…
CVE-2026-656352026-07-30Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attackers to register OpenID Connect clients…
CVE-2026-548852026-07-30Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAuth/OpenID authorization server to issue…
CVE-2026-534312026-07-30Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attacker who has obtained a previously valid JWT client assertion to authen…
CVE-2026-536612026-06-11Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0…