https://vulnerability.circl.lu/sightings/feed 2026-09-03T13:15:27.009799+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ef26d4ad-1c32-480c-93be-f5c66846a2a9/export 2026-09-03T13:15:27.032519+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ef26d4ad-1c32-480c-93be-f5c66846a2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55221", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muktj2w2gc24", "content": "malach-it boruta-server pre-0.10.0 logs sensitive OAuth/OpenID tokens, exposing credentials (CVE-2026-55221, MEDIUM). Update to v0.10.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-55221-cwe-532-insertion-of-sensitive-information-into-log-file-in-malach-it-boruta-server-f5751fd8f7f14e52 #OffS...", "creation_timestamp": "2026-09-02T21:03:31.407019Z"} 2026-09-02T21:03:31.407019+00:00 https://vulnerability.circl.lu/sighting/f6711354-32a6-4e8d-83ac-f487e37e04df/export 2026-09-03T13:15:27.036198+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f6711354-32a6-4e8d-83ac-f487e37e04df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55221", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117203468878391993", "content": "CVE-2026-55221 | malach-it boruta-server (MEDIUM): Versions before 0.10.0 log OAuth/OpenID tokens in business event logs. Credentials at risk if logs are accessed. Patch to v0.10.0. https://radar.offseq.com/threat/cve-2026-55221-cwe-532-insertion-of-sensitive-information-into-log-file-in-malach-it-boruta-server-f5751fd8f7f14e52 #OffSeq #Vuln #OAuth #LogSecurity", "creation_timestamp": "2026-09-02T21:03:30.056512Z"} 2026-09-02T21:03:30.056512+00:00