All vulnerabilities

Servers and applications

GHSA-5mw8-wv8h-h6hx

Insufficient scope validation for passkey authentication

Severity
Critical 9.8
Published
11 Nov 2026
Last changed
11 Nov 2026
Added to UpHeron
11 Nov 2026
Fixed in
5.7.17
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
ContaoServers and applications · github:contao/contao
  • From 5.6.0 before 5.7.17

References