Skip to content
OpenAdvisories

Vendor

juspay

2 known vulnerabilities.

Products

hyperswitch 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-119421

    Hyperswitch through 1.128.0 Missing Authorization in Payout Confirmation

    Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that allows unauthenticated attackers to confirm payouts with any client_secret via POST /payouts/{payout_id}/confirm. Attackers holding the mer…

    juspay hyperswitch
  • Medium 5.9
    CVE-2026-119422

    Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connector

    Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge payment status updates because the Worldpayxml connector's verify_webhook_source always returns true without enforced mTLS. Attack…

    juspay hyperswitch