pay-rails pay

• CVE-2026-70658 High 7.4 pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier 0.6%
• CVE-2023-30614 High 7.1 Improper Neutralization of Script-Related HTML Tags in a Web Page in pay 0.4%