Repository navigation
Security: malach-it/boruta-server
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Authenticated users can bypass consent through navigationGHSA-cqjw-835x-pg9j published
Oct 21, 2026 by patatoidHigh -
WebAuthn-enrolled users can bypass the configured second factorGHSA-pf3v-7cr4-cw64 published
Oct 21, 2026 by patatoidModerate -
Password-reset tokens are exposed in request logsGHSA-xr62-x93r-6qmf published
Oct 21, 2026 by patatoidModerate -
OAuth credentials exposed in Boruta business logsGHSA-pqwf-v25h-4874 published
Jun 16, 2026 by patatoidModerate -
Sensitive session cookies were sent without the Secure attributeGHSA-jqgm-pfg6-cr8r published
Jun 23, 2026 by patatoidHigh -
Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2GHSA-q428-ch8m-94gg published
Jun 1, 2026 by patatoidHigh
Learn more about advisories related to malach-it/boruta-server in the GitHub Advisory Database