boruta
Core of an OAuth/OpenID Connect provider enabling authorization in your applications.
Security Advisories for boruta in hex
Critical
about 11 hours ago
Boruta accepts expired JWT client assertions due to missing exp claim validation
hex
boruta
High
about 11 hours ago
Boruta dynamic client registration allows creation of over-privileged OAuth clients
hex
boruta
Medium
about 11 hours ago
Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching
hex
boruta