← All advisories

Medium severity5.4NVD Advisory· Published Sep 25, 2026

CVE-2026-97736

CVE-2026-97736

Description

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Tinyauth/Tinyauthllm-fuzzy
Range: <5.1.3

Patches

Vulnerability mechanics

References

1

github.com/tinyauthapp/tinyauth/security/advisories/GHSA-r27r-rr9v-vv37nvd

News mentions

0

No linked articles in our index yet.