github.com/tinyauthapp/tinyauth
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for | github.com/tinyauthapp/tinyauth | Go | High | Fix reported | |
| Tinyauth: User enumeration attack by timing oracle | github.com/tinyauthapp/tinyauth | Go | Medium | Fix reported | |
| Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service | github.com/steveiliop56/tinyauthgithub.com/tinyauthapp/tinyauth | Go | Medium | Fix reported |