{"items":[{"id":"CVE-2026-97736","published":"2026-09-25T03:58:59.842Z","updated":"2026-09-26T22:51:19.279Z","title":"tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.","severity":"MEDIUM","score":5.4,"vendor":"tinyauth","product":"tinyauth","kev":false,"epss":0.00208,"kevAdded":null}]}