Skip to content

Spomky-labs Webauthn-lib vulnerabilities

spomky-labs webauthn-lib, webauthn-symfony-bundle, webauthn framwork +1 more +3 moreWebauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validationCVE-2026-30964Fix available5.4 MediumMarch 10, 2026