Skip to content
Threat Feed
Subscribe

Vendor

Gopay

1 brief RSS
high advisory

TLS Verification Bypass in gopay Library

The gopay library versions prior to 1.5.119 contain a flaw in defaultClient() that disables TLS certificate verification, enabling man-in-the-middle attacks to intercept sensitive payment data.

gopay vulnerability tls mitm library
1t 1c