What an excellent write up. Adding a Web Bluetooth API to the browser to then be later used for "secure" actions like passkeys or logins never made any sense to begin with.
How much was this bounty if there was any? Looks like a 7.8 severity CVE [0].
How much was this bounty if there was any? Looks like a 7.8 severity CVE [0].
[0] https://nvd.nist.gov/vuln/detail/CVE-2024-9956