{"action":"Upgrade HaemmerElectronics.SeppPenner.WindowsHello to 1.0.4 or later.","affected":[{"fixed":"1.0.4","introduced":"0"}],"component":"HaemmerElectronics.SeppPenner.WindowsHello","cve_ids":["CVE-2020-11005"],"ecosystem":"NuGet","epss":0.00234,"exploited":false,"fixed_versions":["1.0.4"],"ghsa_id":"GHSA-wvpv-ffcv-r6cw","id":"tcs_01M5N94EMVBA88TNKFPPJFQM60","modified_at":"2026-09-10T03:48:44.105172497Z","published_at":"2020-04-14T23:09:13Z","references":["https://osv.dev/vulnerability/GHSA-wvpv-ffcv-r6cw","https://github.com/SeppPenner/WindowsHello/security/advisories/GHSA-wvpv-ffcv-r6cw","https://nvd.nist.gov/vuln/detail/CVE-2020-11005","https://github.com/SeppPenner/WindowsHello/issues/3"],"severity":{"label":"medium","score":5.1},"sources":[{"source":"osv","source_id":"GHSA-wvpv-ffcv-r6cw","url":"https://osv.dev/vulnerability/GHSA-wvpv-ffcv-r6cw"}],"summary":"Internal NCryptDecrypt method could be used externally from WindowsHello library."}