steveiliop56 tinyauth vulnerabilities
3 published CVEs name steveiliop56 tinyauth among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-33544
Tinyauth has OAuth account confusion via shared mutable state on singleton service instances
steveiliop56 · tinyauth
High7.7 - CVE-2026-32246
Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint
steveiliop56 · tinyauth
High8.5 - CVE-2026-32245
Tinyauth's OIDC authorization codes are not bound to client on token exchange
steveiliop56 · tinyauth
Medium6.5