https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 03 Sep 2026 13:15:26 +0000 https://vulnerability.circl.lu/sighting/ef26d4ad-1c32-480c-93be-f5c66846a2a9/export {"uuid": "ef26d4ad-1c32-480c-93be-f5c66846a2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55221", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muktj2w2gc24", "content": "malach-it boruta-server pre-0.10.0 logs sensitive OAuth/OpenID tokens, exposing credentials (CVE-2026-55221, MEDIUM). Update to v0.10.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-55221-cwe-532-insertion-of-sensitive-information-into-log-file-in-malach-it-boruta-server-f5751fd8f7f14e52 #OffS...", "creation_timestamp": "2026-09-02T21:03:31.407019Z"} {"uuid": "ef26d4ad-1c32-480c-93be-f5c66846a2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55221", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muktj2w2gc24", "content": "malach-it boruta-server pre-0.10.0 logs sensitive OAuth/OpenID tokens, exposing credentials (CVE-2026-55221, MEDIUM). Update to v0.10.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-55221-cwe-532-insertion-of-sensitive-information-into-log-file-in-malach-it-boruta-server-f5751fd8f7f14e52 #OffS...", "creation_timestamp": "2026-09-02T21:03:31.407019Z"} https://vulnerability.circl.lu/sighting/ef26d4ad-1c32-480c-93be-f5c66846a2a9/export Wed, 02 Sep 2026 21:03:31 +0000 https://vulnerability.circl.lu/sighting/f6711354-32a6-4e8d-83ac-f487e37e04df/export {"uuid": "f6711354-32a6-4e8d-83ac-f487e37e04df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55221", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117203468878391993", "content": "CVE-2026-55221 | malach-it boruta-server (MEDIUM): Versions before 0.10.0 log OAuth/OpenID tokens in business event logs. Credentials at risk if logs are accessed. Patch to v0.10.0. https://radar.offseq.com/threat/cve-2026-55221-cwe-532-insertion-of-sensitive-information-into-log-file-in-malach-it-boruta-server-f5751fd8f7f14e52 #OffSeq #Vuln #OAuth #LogSecurity", "creation_timestamp": "2026-09-02T21:03:30.056512Z"} {"uuid": "f6711354-32a6-4e8d-83ac-f487e37e04df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55221", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117203468878391993", "content": "CVE-2026-55221 | malach-it boruta-server (MEDIUM): Versions before 0.10.0 log OAuth/OpenID tokens in business event logs. Credentials at risk if logs are accessed. Patch to v0.10.0. https://radar.offseq.com/threat/cve-2026-55221-cwe-532-insertion-of-sensitive-information-into-log-file-in-malach-it-boruta-server-f5751fd8f7f14e52 #OffSeq #Vuln #OAuth #LogSecurity", "creation_timestamp": "2026-09-02T21:03:30.056512Z"} https://vulnerability.circl.lu/sighting/f6711354-32a6-4e8d-83ac-f487e37e04df/export Wed, 02 Sep 2026 21:03:30 +0000