paypal-ipn

npm1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting paypal-ipnpage 1 of 1

CVE-2014-10067MEDIUMCVSS 5.9✓ Fixed in 3.0.0
2018-05-29
paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simul…

Check whether paypal-ipn is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for paypal-ipn CVEs against the assets you own.

Start Free Scan →