package

Packagist/web-auth/webauthn-framework

pkg:packagist/web-auth/webauthn-framework

CRITICAL9.8Packagist

Improper Access Control in Webauthn Framework

Modified: 2/17/2024

MEDIUM5.3Packagist

The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames

Modified: 9/10/2026

MEDIUM5.4Packagist

Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation

Modified: 9/10/2026

LOW2.1Packagist

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy

Modified: 5/7/2026