Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error in the CheckAllowedOrigins process. An attacker can bypass strict origin validation by submitting authentication or registration responses with a manipulated origin value that matches only the host component,...

The vulnerability of the ProfileBasedRequestOptionsBuilder method in the web authentication library webauthn-lib allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ProfileBasedRequestOptionsBuilder method in the web authentication library webauthn-lib is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

SUSE CVE-2020-12423

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. Note: This issue only affects the Windows operating system; other operating systems are...