pay vulnerabilities (RubyGems)

2 vulnerabilities.

• pay RubyGems pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier CVE-2026-70658 7.4 HighJuly 1, 2026
• pay RubyGems Improper Neutralization of Script-Related HTML Tags in a Web Page in pay CVE-2023-30614 Fix available 7.1 HighApril 19, 2023