Skip to content
OpenAdvisories

Package · Packagist

web-auth/webauthn-symfony-bundle

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-q683-8468-r6h6

    WebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logs

    ## Impact `Webauthn\Bundle\Security\Http\Authenticator\WebauthnAuthenticator` logs the full `Symfony\Component\HttpFoundation\Request` object inside the log context of both `onAuthenticationSuccess()` and `onAuthenticationFailure()` at INFO level: ```php $thi…

    web-auth/webauthn-symfony-bundle Packagist
  • Medium 5.4
    CVE-2026-30964

    Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation

    web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications. Prior to 5.2.4, when allowed_origins is configured, CheckAllowedOrigins reduces URL-l…

    web-auth webauthn-framework webauthn-lib webauthn-symfony-bundle Wolfi Packagist