Pay-rails Pay vulnerabilities

• pay-rails pay pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier CVE-2026-70658 7.4 HighJuly 1, 2026
• pay-rails pay Improper Neutralization of Script-Related HTML Tags in a Web Page in pay CVE-2023-30614 Fix available 7.1 HighApril 19, 2023