PA
Product
pay
1
CVEs
0
On KEV
7.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add pay to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-70658 | 7.4 | Sep 14 | pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier Affected: < 11.6.2 |
Showing 1
