Tinyauth (Tinyauthapp) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-21. Vendor: Tinyauthapp.

CVEs of Tinyauth

• CVE-2026-77561 - CVSS 5.3 (medium), 2026-09-21: Tinyauth is an authentication and authorization server. Prior to 5.1.0, an unauthenticated remote attacker can send POST /api/user/login requests with 257…
• CVE-2026-77582 - CVSS 6.9 (medium), 2026-09-21: Tinyauth is an authentication and authorization server. Prior to 5.1.0, Tinyauth exposes a remotely observable timing difference between authentication…
• CVE-2026-77560 - CVSS 8.1 (high), 2026-09-21: Tinyauth is an authentication and authorization server. Prior to 5.1.2, Tinyauth compares forwarded hostnames case-sensitively while reverse proxies route…