tinyauth

v5.1.1 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 9d Reverse Proxies & Load Balancers

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

2fa authentication caddy go middleware nginx

+6 more

oidc self-hosted sso tinyauth totp typescipt

Affected surfaces

auth

Summary

AI summary

Fixes LDAP user lookup failures, graceful handling of empty OAuth whitelists and label-provider init errors.

Type	Severity	Summary	CVE
Bugfix
Bugfix	Medium	Abstain when OAuth whitelist is empty in ACLs Abstain when OAuth whitelist is empty in ACLs Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Don't fail app on label provider initialization failure Don't fail app on label provider initialization failure Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Fix LDAP user lookup in basic-auth Fix LDAP user lookup in basic-auth Source: llm_adapter@2026-07-17 Confidence: high	—

Full changelog

Small patch fix release, contains fixes for #1011 and #1009.

@wwhsaber made their first contribution in https://github.com/tinyauthapp/tinyauth/pull/1010
@tsushanth made their first contribution in https://github.com/tinyauthapp/tinyauth/pull/1015

Full Changelog: https://github.com/tinyauthapp/tinyauth/compare/v5.1.0...v5.1.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track tinyauth

Get notified when new releases ship.

About tinyauth

The tiniest authentication and authorization server you have ever seen.