juspay has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.9 (medium).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
juspay vulnerabilities
CVEs affecting juspay, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-119422Medium· 5.9Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connector
Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge payment status updates because the Worldpayxml connector's verify_webhook_source always returns true without…
▾ Sunlitjuspay · hyperswitchEPSS 0.24%via CVEORG
CVE-2026-119421Medium· 5.9Hyperswitch through 1.128.0 Missing Authorization in Payout Confirmation
Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that allows unauthenticated attackers to confirm payouts with any client_secret via POST /payouts/{payout_id}/confirm. Att…
▾ Sunlitjuspay · hyperswitchEPSS 0.34%via CVEORG