Go/github.com/tinyauthapp/tinyauth CVE-2026-77582: unknown, EPSS 0.48%
Tinyauth: User enumeration attack by timing oracle in github.com/tinyauthapp/tinyauth
Action: Upgrade github.com/tinyauthapp/tinyauth to 1.0.1-0.20260714134959-c22925c2fba9 or later.
go get github.com/tinyauthapp/tinyauth@v1.0.1-0.20260714134959-c22925c2fba9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1-0.20260714134959-c22925c2fba9 | - |
Fixed versions
| 1.0.1-0.20260714134959-c22925c2fba9 |
Sources
- osv: GO-2026-6555
- https://github.com/tinyauthapp/tinyauth/security/advisories/GHSA-456h-ww26-f758
- https://nvd.nist.gov/vuln/detail/CVE-2026-77582
- https://github.com/tinyauthapp/tinyauth/commit/c22925c2fba981875d0a2b09dd3ee41c0ae4c310
- https://github.com/tinyauthapp/tinyauth/pull/1004
- https://github.com/tinyauthapp/tinyauth/releases/tag/v5.1.0
CVE-2026-77582 · published · modified · JSON