Read the docs

juspay

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

juspay records in CISA KEV

No juspay vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-83000 CVE-2026-119421 · GHSA-r242-wmj3-v8wv

Missing authorization in Hyperswitch lets attackers confirm payouts

Priority LOW 36

Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that allows unauthenticated attackers to confirm payouts with any client_secret via POST /payouts/{payout…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0034 Published 2026-10-30 Fixed in 2026.10.19.0 CWE-639
TI-2026-83001 CVE-2026-119422 · GHSA-73m6-3vjm-8pf5

Authentication bypass in Juspay Hyperswitch Worldpayxml webhooks

Priority LOW 35

Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge payment status updates because the Worldpayxml connector's verify_webhook_source always ret…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00237 Published 2026-10-30 Fixed in 1.128.0, 2026.10.01.0 CWE-345
Open these records in search →