All products

web-auth/webauthn-symfony-bundle

Composer · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logsGHSA-Q683-8468-R6H6 web-auth/webauthn-symfony-bundle Composer Medium Fix reported
Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validationCVE-2026-30964 · GHSA-F7PM-6HR8-7GGM web-auth/webauthn-frameworkweb-auth/webauthn-lib Composer Medium Fix reported