Yansongda Pay vulnerabilities
- pay-rails pay pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier 7.4 High
- yansongda pay WeChat Pay callback signature verification bypassed when Host header is localhost 8.6 High
- pay-rails pay Improper Neutralization of Script-Related HTML Tags in a Web Page in pay 7.1 High