Products: 1
Vulnerabilities: 7
Known Exploited: 0
0
Critical Level Threats
3
High Level Threats
3
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-97736
tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.
Last Modified: Sep 26, 2026
Published: Sep 25, 2026
CVE-2026-77561
Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service
Last Modified: Sep 24, 2026
Published: Sep 21, 2026
CVE-2026-77582
Tinyauth: User enumeration attack by timing oracle
Last Modified: Sep 23, 2026
Published: Sep 21, 2026
CVE-2026-77560
Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for
Last Modified: Sep 21, 2026
Published: Sep 21, 2026
CVE-2026-33544
Tinyauth has OAuth account confusion via shared mutable state on singleton service instances
Last Modified: Apr 08, 2026
Published: Apr 02, 2026
Items Per Page
