1 matches found
CVE-2026-55221 Boruta: OAuth credentials exposed in Boruta business logs
Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, Boruta logged sensitive OAuth and OpenID Connect values in business event logs. Logged values could include access tokens, refresh...
6.5CVSS0.00482EPSS
SaveExploits0References3
20