web-auth/webauthn-framework
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation | web-auth/webauthn-frameworkweb-auth/webauthn-lib | Composer | Medium | Fix reported | |
| The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames | web-auth/webauthn-frameworkweb-auth/webauthn-lib | Composer | Medium | Fix reported | |
| Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy | web-auth/webauthn-framework | Composer | Low | Fix reported | |
| Improper Access Control in Webauthn Framework | web-auth/webauthn-framework | Composer | Critical | Fix reported |