tinytag vulnerabilities (PyPI)

2 vulnerabilities.

• tinytag PyPI tinytag: Infinite loop when parsing certain M4A files containing invalid atoms CVE-2026-104266 Fix available 6.5 MediumOctober 15, 2026
• tinytag PyPI tinytag: Denial of Service via non-terminating SYLT frame parsing loop CVE-2026-32889 Fix available 6.5 MediumMarch 19, 2026