pkg:Packagist/web-auth/webauthn-framework

所有已知漏洞

• CRITICAL9.8CVE-2021-38299Improper Access Control in Webauthn Framework
  >= 3.3.0, < 3.3.4
• MEDIUM5.4CVE-2026-30964Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation
  >= 5.2.0, < 5.2.4
• MEDIUM5.3CVE-2024-39912The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
  >= 4.5.0, < 4.9.0