Vulnerabilities

TI-2026-54080 CVE-2026-77561 · GHSA-9xhm-w3wj-xhqh

Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service

MEDIUM 63

Tinyauth is an authentication and authorization server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.006 Published 2026-09-21 Fixed in 5.1.0, 1.0.1-0.20260715123057-dade1e2c8f27 CWE-307

TI-2026-54084 CVE-2026-77582 · GHSA-456h-ww26-f758

HIGH 70

Tinyauth is an authentication and authorization server.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00626 Published 2026-09-21 Fixed in 5.1.0, 1.0.1-0.20260714134959-c22925c2fba9 CWE-208

TI-2026-54079 CVE-2026-77560 · GHSA-328g-jx67-v94g

LOW 38

Tinyauth is an authentication and authorization server.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00612 Published 2026-09-21 Fixed in 5.1.2, 1.0.1-0.20260720133915-80bc87188ec3 CWE-178