GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)
Moderate
CVE-2026-71537
was published
for
paymenter/paymenter
(Composer)
Sep 18, 2026
Paymenter has race condition in payWithCredit() that enables credit double-spend
Moderate
CVE-2026-55219
was published
for
paymenter/paymenter
(Composer)
Jun 30, 2026
Paymenter has URL parameter injection that bypasses paid plan limits at checkout
High
CVE-2026-47198
was published
for
paymenter/paymenter
(Composer)
Jun 30, 2026
Paymenter has broken object level authorization via service reference manipulation on ticket creation
Moderate
CVE-2026-44585
was published
for
paymenter/paymenter
(Composer)
Jun 22, 2026
Paymenter doesn't reset email verification status after email change
Moderate
CVE-2026-44584
was published
for
paymenter/paymenter
(Composer)
Jun 22, 2026
Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module
Moderate
CVE-2026-44583
was published
for
paymenter/paymenter
(Composer)
Jun 22, 2026
Paymenter vulnerable to Remote Code Execution via public file uploads
Critical
CVE-2025-58048
was published
for
paymenter/paymenter
(Composer)
Jun 22, 2026
ProTip!
Advisories are also available from the
GraphQL API