tinyauth vulnerabilities

1 known vulnerability in tinyauth from Tinyauthapp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  tinyauth: Improper Handling of Case Sensitivity

  CVE-2026-77560Sep 21, 2026Tinyauthapp

  Tinyauth is an authentication and authorization server. Prior to 5.1.2, Tinyauth compares forwarded hostnames case-sensitively while reverse proxies route equivalent hostnames case-insensitively, allowing an authenticated low-privilege user to bypass per-app a