Packagist/web-auth/webauthn-framework: low 2.1
Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy
Action: Upgrade web-auth/webauthn-framework to 5.3.1 or later.
composer require web-auth/webauthn-framework:5.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.0 | 5.3.1 | - |
Fixed versions
| 5.3.1 |
Sources
- osv: GHSA-h4fw-6r7f-w494
- https://github.com/web-auth/webauthn-framework/security/advisories/GHSA-h4fw-6r7f-w494
- https://github.com/web-auth/webauthn-framework
published · modified · JSON