Security: MasterKale/SimpleWebAuthn
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Untrusted WebAuthn attestation certificates can trigger server-side HTTP requestsGHSA-j3h4-m3m2-7p7j published
Sep 13, 2026 by MasterKaleModerate -
Rejected WebAuthn registrations can poison the process-wide CRL cacheGHSA-2g3p-m8c9-hhwh published
Sep 13, 2026 by MasterKaleModerate -
Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchorGHSA-6hxq-p678-4hr2 published
Jun 24, 2026 by MasterKaleLow
Learn more about advisories related to MasterKale/SimpleWebAuthn in the GitHub Advisory Database