CVE-2026-32246 | steveiliop56 tinyauth up to 5.0.2 OIDC Authorization Endpoint improper authentication (GHSA-3q28-qjrv-qr39)

A vulnerability classified as critical was found in steveiliop56 tinyauth up to 5.0.2. This affects an unknown part of the component OIDC Authorization Endpoint. Executing a manipulation can lead to improper authentication.

This vulnerability is registered as CVE-2026-32246. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.