Skip to content
OpenAdvisories

Vendor

getlago

2 known vulnerabilities.

Products

lago 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-119548

    Lago through 1.55.0 Cross-Organization Invoice Payment Manipulation via Stripe Webhook

    Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that allows users of one organization to mark another organization's invoice as paid due to an unscoped invoice lookup. Attackers controlling their organiz…

    getlago lago