Skip to content
OpenAdvisories

Package · npm

@simplewebauthn/server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low —
    GHSA-6hxq-p678-4hr2

    SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor

    ## Summary `validateCertificatePath()` does not verify that an attestation's certificate chain actually terminates at a configured trust anchor. When walking the chain it stops at the first self-signed certificate it finds (which could be user-supplied), and …

    @simplewebauthn/server npm