Install
Works with Drupal: ^10.5 || ^11.2Using Composer to manage Drupal site dependencies
Alternative installation files
Download tar.gz
53.73 KB
MD5: c9f3477dd49724604748fe8f2fad63e8
SHA-1: b2e37ce10b7100b3c2a52849e624ac41fecf37c5
SHA-256: bcf6475b7c8df8c1e2da8b9a34d18fc8cd5f605a3ebaa3678232950ce4e27a4a
Download zip
79.1 KB
MD5: dfcabb52f41bdbb3e4a8fbac2fe3e830
SHA-1: ec4985c9afae1360bb6d065a0944d139c52bbd9b
SHA-256: 22226364e920eb2f5346b3bbd5d9099c2de60ff1d47b61cdf3bd38550d765b44
Release notes
Dependency update: Minimum version of web-auth/webauthn-lib bumped from ^5.2 to ^5.2.4.
This addresses GHSA-f7pm-6hr8-7ggm — an origin validation bypass in the upstream WebAuthn library.
Impact to existing sites: Low. The wa module does not currently enable allowed_origins, so the vulnerable code path is not exercised. This update is a precautionary measure to ensure the patched library is in place.
