Issues

• Try Anthropic OSS Scanner

  web-auth/webauthn-framework#974 · Filter by author zll600 opened on Oct 26, 2026

• WebauthnAuthenticator: "Attempt to read property "response" on array" when JSON body has no id

  web-auth/webauthn-framework#973 · Filter by author luimen6 opened on Oct 25, 2026

• MetadataStatement requires userVerificationDetails, but it is optional since Metadata Statement v3.1

  web-auth/webauthn-framework#970 · Filter by author zhaozhouyang opened on Oct 22, 2026
  2

• fix(assertion): the BE flag of the credential record is rewritten by every assertion, where the specification makes it permanent

  bugcompliance
  web-auth/webauthn-framework#969 · Filter by author Spomky opened on Oct 11, 2026

• TPM attestation still verifies RS1 signatures, which cose-lib v5 will reject

  bugcompliancesecurity
  web-auth/webauthn-framework#963 · Filter by author Spomky opened on Sep 10, 2026 · 6.0.0
  

• chore(spec-watch): upcoming WebAuthn changes to anticipate

  compliancepinned
  web-auth/webauthn-framework#926 · Filter by author Spomky opened on Aug 20, 2026 · 6.0.0
  

• feat(extensions): support remoteClientDataJSON for remote desktop web clients (WebAuthn ED)

  compliancefeature
  web-auth/webauthn-framework#854 · Filter by author Spomky opened on May 2, 2026 · 6.0.0