{"action":"Upgrade github.com/steveiliop56/tinyauth to 1.0.1-0.20260715123057-dade1e2c8f27 or later.","affected":[{"fixed":"1.0.1-0.20260715123057-dade1e2c8f27","introduced":"0"}],"component":"github.com/steveiliop56/tinyauth","cve_ids":["CVE-2026-77561"],"ecosystem":"Go","epss":0.006,"exploited":false,"fixed_versions":["1.0.1-0.20260715123057-dade1e2c8f27"],"ghsa_id":"GHSA-9xhm-w3wj-xhqh","id":"tcs_01M5KF6D32N1CH4479K5M4MR55","modified_at":"2026-10-01T20:56:00.010969924Z","published_at":"2026-09-22T20:37:11Z","references":["https://osv.dev/vulnerability/GHSA-9xhm-w3wj-xhqh","https://github.com/tinyauthapp/tinyauth/security/advisories/GHSA-9xhm-w3wj-xhqh","https://nvd.nist.gov/vuln/detail/CVE-2026-77561","https://github.com/tinyauthapp/tinyauth/pull/1008","https://github.com/tinyauthapp/tinyauth/pull/943","https://github.com/tinyauthapp/tinyauth/commit/654b5cc436fc67865c1f55edf9ba9fbded50b74f","https://github.com/tinyauthapp/tinyauth/commit/dade1e2c8f27a23df56ac216dcaf4b37081698e7","https://github.com/tinyauthapp/tinyauth","https://github.com/tinyauthapp/tinyauth/releases/tag/v5.1.0"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9xhm-w3wj-xhqh","url":"https://osv.dev/vulnerability/GHSA-9xhm-w3wj-xhqh"}],"summary":"Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service"}