roncoo-pay vulnerabilities

CVEs whose affected-version data names the roncoo-pay package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111719Medium· 5.9

yesterday

Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query

Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by supplying a trxNo parameter. Attackers can guess transac…

▾ Sunlitroncoo · roncoo-payvia CVEORG