Log in Start free

web-auth

Products

ProductCVEsExploitedLatest
webauthn-framework2–Mar 10, 2026
webauthn-lib1–Mar 10, 2026
webauthn-symfony-bundle1–Mar 10, 2026

Exploited and recent CVEs

  • CVE-2026-30964 Medium 5.4 Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation 0.2%
  • CVE-2026-30964 Medium 5.4 Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation 0.2%
  • CVE-2026-30964 Medium 5.4 Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation 0.2%
  • CVE-2024-39912 Medium 5.3 Enumeration of valid usernames in web-auth/webauthn-lib 0.4%