crates.io/webauthn-rs-core: low
webauthn-rs-core/webauthn-authenticator-rs: Origin validation mismatch possible when subdomains are allowed
Action: Upgrade webauthn-rs-core to 0.5.5 or later.
cargo update -p webauthn-rs-core --precise 0.5.5cargo update -p webauthn-rs-core --precise 0.6.1-devAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.5 | - |
| 0.6.0-dev | 0.6.1-dev | - |
Fixed versions
| 0.5.5 | 0.6.1-dev |
Sources
- osv: GHSA-22w3-693w-x895
- https://github.com/kanidm/webauthn-rs/security/advisories/GHSA-22w3-693w-x895
- https://github.com/kanidm/webauthn-rs
published · modified · JSON