malach-it boruta-server

• CVE-2026-49249 High 7.1 Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2 0.4%
• CVE-2026-55221 Medium 6.5 Boruta: OAuth credentials exposed in Boruta business logs 0.5%
• CVE-2026-53661 High 8.8 boruta-server sent sensitive session cookies without the Secure attribute 0.3%