Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/steveiliop56/tinyauth

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/steveiliop56/tinyauth in go

High
5 months ago

Tinyauth has OAuth account confusion via shared mutable state on singleton service instances GSA_kwCzR0hTQS05cTVtLWpmYzQtd2M5Ms4ABUkk

go github.com/steveiliop56/tinyauth
High
5 months ago

Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint GSA_kwCzR0hTQS0zcTI4LXFqcnYtcXIzOc4ABTja

go github.com/steveiliop56/tinyauth
Moderate
5 months ago

Tinyauth's OIDC authorization codes are not bound to client on token exchange GSA_kwCzR0hTQS14ZzJxLTYyZzItY3Zjbc4ABTjZ

go github.com/steveiliop56/tinyauth

Filter by Severity

High 2 Moderate 1