web-auth/webauthn-lib
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection | web-auth/webauthn-lib | Composer | Low | Fix reported | |
| Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation | web-auth/webauthn-frameworkweb-auth/webauthn-lib | Composer | Medium | Fix reported | |
| The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames | web-auth/webauthn-frameworkweb-auth/webauthn-lib | Composer | Medium | Fix reported |