Web-auth Webauthn-lib vulnerabilities

• spomky-labs webauthn-lib, webauthn-symfony-bundle, webauthn framwork +1 more +3 more Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation CVE-2026-30964 Fix available 5.4 MediumMarch 10, 2026