Newsheise Security

Passkeys in der Praxis – Teil 1: Die Architektur von Passkeys

Share

Teaser from the source

So funktionieren Passkeys: Der erste Teil der Praxis-Serie für Entwickler zeigt im Detail die Architektur, die auf FIDO2 und WebAuthn aufbaut.

This is the RSS-feed teaser. Read the full article at the original source.

Read at heise Security

Other advisories

CriticalCVE-2026-115770Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.2.0 until 2.12.0, SendEmailVerification uses the toke…
HighCVE-2026-62662Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 1.11.0 until 2.10.0, createTokenFromClientCredentials i…
MediumCVE-2026-106264Fehlende Zugriffskontrolle in der Web-Authentifizierung (Passkeys & Sicherheitsschlüssel) in Google Chrome vor Version 155.
MediumCVE-2026-106264Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements…
Not ratedosv:CVE-2026-54460OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover
CriticalCVE-2026-54460OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to 1.1.1, POST /api/auth/passkeys accepts a…
MediumCVE-2026-55834Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.…
MediumCVE-2026-79178Chromium: CVE-2026-79178 Incorrect authorization in Web Authentication (Passkeys & Security Keys)

Other news entries

Source: https://www.heise.de/hintergrund/Passkeys-in-der-Praxis-Teil-1-Die-Architektur-von-Passkeys-11364345.html

ID