https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 13:40:36 +0000 https://db.gcve.eu/vuln/ghsa-6rw4-h2xg-jvvp <p>Zipline through 4.4.0 contains an authentication bypass vulnerability in the WebAuthn login endpoint that creates sessions for a supplied registered credential ID without verifying the assertion. Attackers who obtain a target&#39;s passkey credential ID can impersonate that account without its authenticator, potentially gaining administrative control over SUPERADMIN accounts.</p> <p>Zipline through 4.4.0 contains an authentication bypass vulnerability in the WebAuthn login endpoint that creates sessions for a supplied registered credential ID without verifying the assertion. Attackers who obtain a target&#39;s passkey credential ID can impersonate that account without its authenticator, potentially gaining administrative control over SUPERADMIN accounts.</p> https://db.gcve.eu/vuln/ghsa-6rw4-h2xg-jvvp