TI-2026-49359 CVE-2026-70658
pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier
Priority HIGH 68
Pay is a payments engine for Ruby on Rails 6.0 and higher.
No pay-rails vulnerabilities are listed in CISA KEV.
1 record
Pay is a payments engine for Ruby on Rails 6.0 and higher.