Itz-D0Dgy-2Nd

**Name of the Vulnerable Software and Affected Versions** capacitor-native-biometric versions prior to 12.128.2 **Description** An authentication bypass exists because the `onAuthenticationSucceeded()` function fails to validate `CryptoObject` parameters. This allows attackers to use dynamic instrumentation to hook the `onAuthenticationSucceeded()` function and bypass biometric authentication without providing valid credentials. **Recommendations** Update to version 12.128.2 or later. As a temporary workaround, restrict the use of the `onAuthenticationSucceeded()` function until the update is applied.