Skip to content
OpenAdvisories

Package · crates.io

webauthn-authenticator-rs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low —
    GHSA-22w3-693w-x895

    webauthn-rs-core/webauthn-authenticator-rs: Origin validation mismatch possible when subdomains are allowed

    ### Summary `webauthn-rs-core` ([Relying Party][rp]) and `webauthn-authenticator-rs` ([client][]) checked that [an `Origin` in `CollectedClientData`][origin] is valid for [an RP ID][rpid] with [`str::ends_with()`][ends-with], [without checking for a dot (`.`)…

    webauthn-authenticator-rs webauthn-rs-core crates.io