npm/@simplewebauthn/server: low
SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor
Action: Upgrade @simplewebauthn/server to 13.3.2 or later.
npm i @simplewebauthn/server@13.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 13.3.2 | - |
Fixed versions
| 13.3.2 |
Sources
- osv: GHSA-6hxq-p678-4hr2
- https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2
- https://github.com/MasterKale/SimpleWebAuthn/commit/67a41fed3dfd96cab1dcf414f6d1792a72e06e35
- https://github.com/MasterKale/SimpleWebAuthn/commit/8a53d70f42bcbb7c744ef1b90e6db35bc4b26d06
- https://github.com/MasterKale/SimpleWebAuthn/commit/dd0d73c716a528e6645efafbd43a972b64df71f9
- https://github.com/MasterKale/SimpleWebAuthn
- https://github.com/MasterKale/SimpleWebAuthn/releases/tag/v13.3.2
published · modified · JSON