Vendor archive

yansongda CVEs

Beta · best-effort

1 CVEs tagged to vendor yansongda — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2026-33661

Published Mar 26, 2026

Pay is an open-source payment SDK extension package for various Chinese payment services. Prior to version 3.7.20, the `verify_wechat_sign()` function in `src/Functions.php` uncon…

CVSS 8.6 · High

evidence mentions: 3
Buzz score: 18.9

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1