two-factor_webauthn vulnerabilities

CVEs whose affected-version data names the two-factor_webauthn package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-66558Low· 3.1

10mo ago

Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud

Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing ownership check allowed an attack to take-away a 2FA webauthn device when correctly guessing a 80-128 character long rand…

▾ Sunlitnextcloud · two-factor_webauthnEPSS 0.28%via NVD