web-auth/webauthn-framework vulnerabilities (Packagist)
4 vulnerabilities.
-
web-auth/webauthn-frameworkPackagist Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy 2.1 Low -
web-auth/webauthn-frameworkPackagist Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation 5.4 Medium -
web-auth/webauthn-frameworkPackagist Enumeration of valid usernames in web-auth/webauthn-lib 5.3 Medium -
web-auth/webauthn-frameworkPackagist Improper Access Control in Webauthn Framework 9.8 Critical