Goodoneuz vulnerabilities
We track 1 vulnerability in Goodoneuz products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 16, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Goodoneuz vulnerabilities
- 9.8 Critical severity
pay-uz: Improper Access Control
The goodoneuz/pay-uz Laravel package (<= 2.2.24) contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite existing PHP payment hook files. The endpoint is exposed via Route::any without a