← All credits

Pascal Knoth

3 vulnerability records and advisories credit this contributor.

Boruta dynamic client registration allows creation of over-privileged OAuth clients

Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching

Boruta accepts expired JWT client assertions due to missing exp claim validation