Skip to content

fix: deny Spring Security's built-in WebAuthn credential-delete endpoint (GHSA-3cv9-vgqh-jwpm) - #366

Merged
devondragon merged 2 commits into
mainfrom
security/GHSA-3cv9-webauthn-delete-denyall
Aug 20, 2026
Merged

fix: deny Spring Security's built-in WebAuthn credential-delete endpoint (GHSA-3cv9-vgqh-jwpm)#366
devondragon merged 2 commits into
mainfrom
security/GHSA-3cv9-webauthn-delete-denyall

test: cover allow-mode deny of built-in WebAuthn delete endpoint

0274665
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar