steveiliop56 tinyauth

• CVE-2026-33544 High 7.7 Tinyauth has OAuth account confusion via shared mutable state on singleton service instances 0.4%
• CVE-2026-32246 High 8.5 Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint 0.3%
• CVE-2026-32245 Medium 6.5 Tinyauth's OIDC authorization codes are not bound to client on token exchange 0.3%