web-auth/webauthn-framework Security Advisories - Packagist | Ecosyste.ms: Advisories

web-auth/webauthn-framework

FIDO2/Webauthn library for PHP and Symfony Bundle.

View on github.com · View on packagist.org

Security Advisories for web-auth/webauthn-framework in packagist

Low

3 months ago

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy GSA_kwCzR0hTQS1oNGZ3LTZyN2YtdzQ5NM4ABWZu

packagist web-auth/webauthn-framework

Moderate

5 months ago

Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation GSA_kwCzR0hTQS1mN3BtLTZocjgtN2dnbc4ABTXg

packagist web-auth/webauthn-symfony-bundle, web-auth/webauthn-lib, web-auth/webauthn-framework

Moderate

about 2 years ago

The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames GSA_kwCzR0hTQS04NzV4LWc4cDctNXcyN84AA95Y

packagist web-auth/webauthn-framework, web-auth/webauthn-lib

Critical

almost 5 years ago

Improper Access Control in Webauthn Framework GSA_kwCzR0hTQS02d2hmLXE2cDUtODR3Z80WBw

packagist web-auth/webauthn-framework

Filter by Severity

Moderate 2 Low 1 Critical 1