Advisories · Technology

lago.

Every CVE that names lago among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119548 CVE record

CVSS 2.3 Low

Lago through 1.55.0 Cross-Organization Invoice Payment Manipulation via Stripe Webhook
- lago
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-119420 CVE record

CVSS 8.7 High

Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation
- lago
- Authentication bypass
Not analysed yet 30 Oct 2026