capacitor-native-biometric - Authentication Bypass via Unvalidated CryptoObject in onAuthenticationSucceeded

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-56294 · Microsoft / collected KEV context

EUVD-2026-38121

GHSA-58pv-hg46-37r9

GHSA-vx5f-vmr6-32wf

cve-program · CVE-2026-56294

• https://github.com/Cap-go/capgo/security/advisories/GHSA-vx5f-vmr6-32wf
• https://www.vulncheck.com/advisories/capacitor-native-biometric-authentication-bypass-via-unvalidated-cryptoobject-in-onauthenticationsucceeded

euvd · EUVD-2026-38121

• https://github.com/Cap-go/capgo/security/advisories/GHSA-vx5f-vmr6-32wf
• https://www.vulncheck.com/advisories/capacitor-native-biometric-authentication-bypass-via-unvalidated-cryptoobject-in-onauthenticationsucceeded

nvd · CVE-2026-56294

• https://github.com/Cap-go/capgo/security/advisories/GHSA-vx5f-vmr6-32wf
• https://www.vulncheck.com/advisories/capacitor-native-biometric-authentication-bypass-via-unvalidated-cryptoobject-in-onauthenticationsucceeded

osv · GHSA-vx5f-vmr6-32wf

• https://github.com/Cap-go/capgo/security/advisories/GHSA-vx5f-vmr6-32wf
• https://github.com/Cap-go/capacitor-native-biometric/commit/1254602e942f8216e6258f646f0866d8e69c48a5
• https://github.com/Cap-go/capgo

No related operational record is retained in the current change model.