Spomky-labs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Spomky-labs records in CISA KEV

No Spomky-labs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webauthn Framwork 2 records MEDIUM Webauthn-lib 1 record MEDIUM Webauthn-symfony-bundle 1 record MEDIUM Webauthn Framework 1 record MEDIUM

Records

1 record in Webauthn-symfony-bundle · all components

TI-2026-23789 CVE-2026-30964 · GHSA-f7pm-6hr8-7ggm

Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation

MEDIUM 58

web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00227 Published 2026-03-10 Fixed in 5.2.4 CWE-346

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0