Steveiliop56

3 CVEs in 1 Steveiliop56 product, including Tinyauth. Newest: CVE-2026-33544 (2026-04-02). Severity, EPSS and public exploits for each.

Steveiliop56 products with known CVEs

ProductCVEs
Tinyauth3
Steveiliop56 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-33544High7.72026-04-02Tinyauth is an authentication and authorization server. Prior to version 5.0.5, all three OAuth service implementations (GenericOAuthService, GithubOAuthServic…
CVE-2026-32246High8.52026-03-12Tinyauth is an authentication and authorization server. Prior to 5.0.3, the OIDC authorization endpoint allows users with a TOTP-pending session (password veri…
CVE-2026-32245Medium6.52026-03-12Tinyauth is an authentication and authorization server. Prior to 5.0.3, the OIDC token endpoint does not verify that the client exchanging an authorization cod…