Webauthn

Latest version: v2.5.2

Safety actively analyzes 723217 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 5

2.5.2

**Changes:**

- Update project to `cryptography==44.0.2` and `pyOpenSSL==25.0.0` ([250](https://github.com/duo-labs/py_webauthn/pull/250))

2.5.1

**Changes:**

- Prevented `"android-key"` attestation tests from failing when it's after February 2nd ([244](https://github.com/duo-labs/py_webauthn/pull/244))

2.5.0

**Changes:**

- A new `require_user_presence` argument has been added to `verify_registration_response()` to enable verification of WebAuthn responses generated through use of [conditional create](https://w3c.github.io/webauthn/#dom-clientcapability-conditionalcreate) where the `up` bit in `authData.flags` will be `False` ([236](https://github.com/duo-labs/py_webauthn/pull/236), h/t bschoenmaeckers)
- `verify_authentication_response()` has been updated to return `user_verified` as well to indicate whether or not the user performed user verification ([235](https://github.com/duo-labs/py_webauthn/pull/235), h/t ggirol-rc)
- Verification of `"android-key"` attestation statements has been modernized in light of Android's latest observable behavior ([240](https://github.com/duo-labs/py_webauthn/pull/240))
- Verification of `"android-safetynet"` attestation statements now enforces the `"basicIntegrity"` flag instead of the `"ctsProfileMatch"` flag when determining device integrity ([241](https://github.com/duo-labs/py_webauthn/pull/241))
- The list of known TPM manufacturers has been updated ([242](https://github.com/duo-labs/py_webauthn/pull/242))

2.4.0

**Changes:**

- An optional `hints` argument has been added to `generate_registration_options()` to specify one or more categories of authenticators for the browser to prioritize registration of. See `webauthn.helpers.structs.PublicKeyCredentialHint` for more information ([234](https://github.com/duo-labs/py_webauthn/pull/234))

2.3.0

**Changes:**

- The minimum supported version of Python has been bumped up to Python 3.9, with ongoing testing from Python 3.9 through Python 3.13. Dependencies have been updated as well, including upgrading to `cryptography==43.0.3` ([233](https://github.com/duo-labs/py_webauthn/pull/233), with thanks to ds-cbo)

2.2.0

**Changes:**

- All exceptions in `webauthn.helpers.exceptions` now subclass the new `webauthn.helpers.exceptions.WebAuthnException` base exception ([219](https://github.com/duo-labs/py_webauthn/issues/219), h/t bschoenmaeckers)
- Support has been added for the new `"smart-card"` transport ([221](https://github.com/duo-labs/py_webauthn/pull/221))

Page 1 of 5

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.