Executive brief
Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy
Affected products
- Packagist web-auth/webauthn-framework
Junglewise Threat Intelligence
Severity: low · CVSS 3.1 · Published 2026-05-07
Technologies: web-auth/webauthn-framework (Packagist). Vendors: Packagist.
Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy