[ Vendor · 1 CVEs ]
go-pay
CVEs affecting go-pay published in the last 30 days, plus any go-pay CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105218 | 4 Oct 2026 | CVSS 7.4 | go-pay gopaygopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to… |