Threats tagged 'ghsa-w22m-c8rq-w42r'

A security vulnerability (CVE-2026-19010) exists in TinyAGI version 0.0.20 within the processMessage function of the Message API Endpoint component. This flaw allows remote attackers to bypass authorization checks, potentially leading to unauthorized access. The vulnerability has a high severity score of 7.3 (CVSS 3.1) and has been publicly disclosed. The project has been notified but has not yet issued a response or patch.