crates.io/webauthn-authenticator-rs: low
webauthn-rs-core/webauthn-authenticator-rs: Origin validation mismatch possible when subdomains are allowed
Action: Upgrade webauthn-authenticator-rs to 0.5.5 or later.
cargo update -p webauthn-authenticator-rs --precise 0.6.1-devcargo update -p webauthn-authenticator-rs --precise 0.5.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.6.0-dev | 0.6.1-dev | - |
| 0 | 0.5.5 | - |
Fixed versions
| 0.6.1-dev | 0.5.5 |
Sources
- osv: GHSA-22w3-693w-x895#crates.io/webauthn-authenticator-rs
- https://github.com/kanidm/webauthn-rs/security/advisories/GHSA-22w3-693w-x895
- https://github.com/kanidm/webauthn-rs
published · modified · JSON