{"action":"Upgrade github.com/tinyauthapp/tinyauth to 1.0.1-0.20260715123057-dade1e2c8f27 or later.","affected":[{"fixed":"1.0.1-0.20260715123057-dade1e2c8f27","introduced":"0"}],"component":"github.com/tinyauthapp/tinyauth","cve_ids":["CVE-2026-77561"],"ecosystem":"Go","epss":0.006,"exploited":false,"fixed_versions":["1.0.1-0.20260715123057-dade1e2c8f27"],"ghsa_id":"GHSA-9xhm-w3wj-xhqh","id":"tcs_01M5KGVDR4B9ANCB12NP8YQ0SW","modified_at":"2026-10-01T20:45:14.024702594Z","published_at":"2026-10-01T20:23:38Z","references":["https://osv.dev/vulnerability/GO-2026-6564","https://github.com/tinyauthapp/tinyauth/security/advisories/GHSA-9xhm-w3wj-xhqh","https://nvd.nist.gov/vuln/detail/CVE-2026-77561","https://github.com/tinyauthapp/tinyauth/commit/654b5cc436fc67865c1f55edf9ba9fbded50b74f","https://github.com/tinyauthapp/tinyauth/commit/dade1e2c8f27a23df56ac216dcaf4b37081698e7","https://github.com/tinyauthapp/tinyauth/pull/1008","https://github.com/tinyauthapp/tinyauth/pull/943","https://github.com/tinyauthapp/tinyauth/releases/tag/v5.1.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6564","url":"https://osv.dev/vulnerability/GO-2026-6564"}],"summary":"Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service in github.com/tinyauthapp/tinyauth"}