payy vulnerabilities

1 known vulnerability in payy from Polybase. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  payy: Acceptance of Extraneous Untrusted Data With Trusted Data

  CVE-2026-48100Sep 28, 2026Polybase

  Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, agg_agg forwards the compacted message stream from its inner proofs into a public messages: [Field; 1000] array, but it never checks that the