github.com/steveiliop56/tinyauth vulnerabilities (Go)

4 vulnerabilities.

• github.com/steveiliop56/tinyauth Go Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service CVE-2026-77561 Fix available 5.3 MediumSeptember 21, 2026
• github.com/steveiliop56/tinyauth Go Tinyauth has OAuth account confusion via shared mutable state on singleton service instances CVE-2026-33544 Fix available 7.7 HighApril 1, 2026
• github.com/steveiliop56/tinyauth Go Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint CVE-2026-32246 Fix available 8.5 HighMarch 12, 2026
• github.com/steveiliop56/tinyauth Go Tinyauth's OIDC authorization codes are not bound to client on token exchange CVE-2026-32245 Fix available 6.5 MediumMarch 12, 2026