VDB
Sign up

package

npm/fido2-lib

pkg:npm/fido2-lib

HIGH7.5npm
GHSA-g3qj-j598-cxmq

fido2-lib is vulnerable to DoS via cbor-extract heap buffer over-read in CBOR attestation parsing

Modified: 3/24/2026