CVE-2026-54885 Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching

[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:malach-it:boruta_auth:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.Boruta.Oauth.Request.Base'",
      "'Elixir.Boruta.Openid'",
      "'Elixir.Boruta.Ecto.Clients'"
    ],
    "packageName": "boruta",
    "packageURL": "pkg:hex/boruta",
    "product": "boruta",
    "programFiles": [
      "lib/boruta/oauth/request/base.ex",
      "lib/boruta/openid.ex",
      "lib/boruta/adapters/ecto/clients.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.Boruta.Oauth.Request.Base':fetch_unsigned_request/1"
      },
      {
        "name": "'Elixir.Boruta.Openid':parse_registration_params/2"
      },
      {
        "name": "'Elixir.Boruta.Ecto.Clients':refresh_jwk_from_jwks_uri/1"
      }
    ],
    "repo": "https://github.com/malach-it/boruta_auth",
    "vendor": "malach-it",
    "versions": [
      {
        "lessThan": "2.3.7",
        "status": "affected",
        "version": "2.3.2",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:malach-it:boruta_auth:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.Boruta.Oauth.Request.Base'",
      "'Elixir.Boruta.Openid'",
      "'Elixir.Boruta.Ecto.Clients'"
    ],
    "packageName": "malach-it/boruta_auth",
    "packageURL": "pkg:github/malach-it/boruta_auth",
    "product": "boruta",
    "programFiles": [
      "lib/boruta/oauth/request/base.ex",
      "lib/boruta/openid.ex",
      "lib/boruta/adapters/ecto/clients.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.Boruta.Oauth.Request.Base':fetch_unsigned_request/1"
      },
      {
        "name": "'Elixir.Boruta.Openid':parse_registration_params/2"
      },
      {
        "name": "'Elixir.Boruta.Ecto.Clients':refresh_jwk_from_jwks_uri/1"
      }
    ],
    "repo": "https://github.com/malach-it/boruta_auth",
    "vendor": "malach-it",
    "versions": [
      {
        "changes": [
          {
            "at": "001e3dc5c259e67c6f907e98867eda4141c96d0d",
            "status": "unaffected"
          },
          {
            "at": "95fb10b78129355e475681f324c9a01ef0af2be5",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "15455b86206e0370eabd64c1856a5c996b436455",
        "versionType": "git"
      }
    ]
  }
]