Pay-Rails Pay
2 CVEs affecting Pay-Rails Pay. Latest disclosed: 2026-09-14. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-70658 | High | 7.4 | 2026-09-14 | Pay is a payments engine for Ruby on Rails 6.0 and higher. Prior to 11.6.2, Pay::Webhooks::PaddleBillingController#valid_signature? in app/controllers/pay/webh… |
CVE-2023-30614 | High | 7.1 | 2023-04-19 | Pay is a payments engine for Ruby on Rails 6.0 and higher. In versions prior to 6.3.2 a payments info page of Pay is susceptible to reflected Cross-site script… |