[ Vendor · 1 CVEs ]

tinyauth

CVEs affecting tinyauth published in the last 30 days, plus any tinyauth CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-97736 25 Sep 2026 CVSS 5.4 tinyauthtinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.