boruta
Core of an OAuth/OpenID Connect provider enabling authorization in your applications.
Security Advisories for boruta in hex
Critical
21 days ago
Boruta accepts expired JWT client assertions due to missing exp claim validation
hex
boruta
High
21 days ago
Boruta dynamic client registration allows creation of over-privileged OAuth clients
hex
boruta
Medium
21 days ago
Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching
hex
boruta