MEDIUM 5.4 NVD

CVE-2026-97736

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.

References

Published: 2026-09-25 · Source: NVD · Feed updated: 2026-09-25
This medium severity vulnerability with a CVSS score of 5.4 was published on 2026-09-25 via NVD.
vulnfeed aggregates 10851 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.