Vulnerabilities

All ecosystems 728371 AlmaLinux 5156 Alpaquita 11380 Alpine 4310 Android 3403 Azure Linux 12016 BellSoft Hardened Containers 533 Bitnami 8221 Chainguard 8639 CleanStart 1524 CRAN 14 crates.io 2523 Debian 59359 Echo 6335 GHC 3 GIT 81721 GitHub Actions 54 Go 7929 Hackage 32 Hex 165 Julia 979 Linux 15361 Mageia 6003 Maven 6655 MinimOS 78178 npm 221199 NuGet 1758 opam 18 openEuler 7054 openSUSE 13299 OSS-Fuzz 3950 Packagist 6596 Pub 11 PyPI 20726 Red Hat 20975 Rocky Linux 3538 Root 17120 RubyGems 2008 SUSE 21044 SwiftURL 58 TuxCare 5651 Ubuntu 56782 VSCode 20 Wolfi 6071

GHSA-mjgf-xj26-9qf9

RubyGems/pay

pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier

18 hours ago

No fix available
Severity - 7.4 (High)