Log in Start free

steveiliop56

Products

ProductCVEsExploitedLatest
tinyauth3–Apr 2, 2026

Exploited and recent CVEs

  • CVE-2026-33544 High 7.7 Tinyauth has OAuth account confusion via shared mutable state on singleton service instances 0.4%
  • CVE-2026-32246 High 8.5 Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint 0.3%
  • CVE-2026-32245 Medium 6.5 Tinyauth's OIDC authorization codes are not bound to client on token exchange 0.3%