Spomky-labs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Spomky-labs records in CISA KEV

No Spomky-labs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webauthn Framwork 2 records MEDIUM Webauthn-lib 1 record MEDIUM Webauthn-symfony-bundle 1 record MEDIUM Webauthn Framework 1 record MEDIUM

Records

2 records

TI-2026-23789 CVE-2026-30964 · GHSA-f7pm-6hr8-7ggm

Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation

MEDIUM 58

web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00227 Published 2026-03-10 Fixed in 5.2.4 CWE-346

TI-2021-15912 CVE-2021-38299 · GHSA-6whf-q6p5-84wg

Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control.

MEDIUM 46

Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.018 Published 2021-09-27 Fixed in 3.3.4 CWE-287

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0