[ Vendor · 2 CVEs ]
getlago
CVEs affecting getlago published in the last 30 days, plus any getlago CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-119548 | 30 Oct 2026 | CVSS 3.1 | getlago lagoLago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that allows users of one organization to mark… | |
| CVE-2026-119420 | 30 Oct 2026 | CVSS 8.8 | getlago lagoLago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing… |