Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
yansongda/pay
yansongda/pay vulnerabilities (Packagist)
1 vulnerability.
yansongda/pay
Packagist
WeChat Pay callback signature verification bypassed when Host header is localhost
CVE-2026-33661
Fix available
8.6
High
March 25, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open