CVE-2026-44585
1 advisory.
Packagist/paymenter/paymenter CVE-2026-44585: medium 5.4
Paymenter has broken object level authorization via service reference manipulation on ticket creation
Action: Upgrade paymenter/paymenter to 1.5.0 or later.
composer require paymenter/paymenter:1.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
- osv: GHSA-x93q-x9pc-w5hw
- https://github.com/Paymenter/Paymenter/security/advisories/GHSA-x93q-x9pc-w5hw
- https://github.com/Paymenter/Paymenter
CVE-2026-44585 · published · modified · JSON