package

Packagist/web-auth/webauthn-lib

pkg:packagist/web-auth/webauthn-lib

MEDIUM5.3Packagist

The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames

Modified: 9/10/2026

MEDIUM5.4Packagist

Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation

Modified: 9/10/2026

LOWPackagist

Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection

Modified: 9/10/2026