web-auth/webauthn-lib vulnerabilities (Packagist)
3 vulnerabilities.
-
web-auth/webauthn-libPackagist Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection 2.9 Low -
web-auth/webauthn-libPackagist Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation 5.4 Medium -
web-auth/webauthn-libPackagist Enumeration of valid usernames in web-auth/webauthn-lib 5.3 Medium