getlago

Products

ProductCVEsExploitedLatest
lago2–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-119548 Low 3.1 Lago through 1.55.0 Cross-Organization Invoice Payment Manipulation via Stripe Webhook 0.3%
  • CVE-2026-119420 High 8.8 Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation 0.4%