pay-rails
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| pay | 2 | – | Sep 14, 2026 |
Exploited and recent CVEs
- CVE-2026-70658 pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier 0.6%
- CVE-2023-30614 Improper Neutralization of Script-Related HTML Tags in a Web Page in pay 0.4%