Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
web-auth/webauthn-symfony-bundle
web-auth/webauthn-symfony-bundle vulnerabilities (Packagist)
2 vulnerabilities.
web-auth/webauthn-symfony-bundle
Packagist
WebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logs
GHSA-q683-8468-r6h6
Fix available
6.6
Medium
June 26, 2026
web-auth/webauthn-symfony-bundle
Packagist
Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation
CVE-2026-30964
Fix available
5.4
Medium
March 10, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open