PA
Product
pay
by pay-rails · last CVE Sep 14, 2026
1
CVEs
0
On KEV
7.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add pay to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-70658
7.4
1%
Sep 14
pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier
Affected: < 11.6.2
Showing 1