Junglewise Threat Intelligence

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy

Severity: low · CVSS 3.1 · Published 2026-05-07

Technologies: web-auth/webauthn-framework (Packagist). Vendors: Packagist.

Executive brief

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy

Affected products

  • Packagist web-auth/webauthn-framework

Related threats