Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: juspay Clear all filters
TI-2026-83001 CVE-2026-119422 · GHSA-73m6-3vjm-8pf5

Authentication bypass in Juspay Hyperswitch Worldpayxml webhooks

Priority LOW 35

Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge payment status updates because the Worldpayxml connector's verify_webhook_source always ret…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00237 Published 2026-10-30 Fixed in 1.128.0, 2026.10.01.0 CWE-345
TI-2026-83000 CVE-2026-119421 · GHSA-r242-wmj3-v8wv

Missing authorization in Hyperswitch lets attackers confirm payouts

Priority LOW 36

Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that allows unauthenticated attackers to confirm payouts with any client_secret via POST /payouts/{payout…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0034 Published 2026-10-30 Fixed in 2026.10.19.0 CWE-639