Advisories for packages from web-auth

Listing reported advisories for packages from web-auth sorted by their report date.

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy
GitHub

web-auth/webauthn-framework

>= 5.3.0, < 5.3.1

2026-05-07 21:05:34
Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation
GitHub

web-auth/webauthn-framework

>= 5.2.0, < 5.2.4 · < 5.2.4

2026-03-10 22:21:16
The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
GitHub

web-auth/webauthn-lib

>= 4.5.0, < 4.9.0

2024-07-15 16:37:49
Improper Access Control in Webauthn Framework
GitHub

web-auth/webauthn-framework

>= 3.3.0, < 3.3.4

2021-09-28 21:04:01

Need help?

We are happy to help you with any questions you might have.

Documentation Roadmap Report a bug Get in touch