CVE-2026-71537

Paymenter , an open-source webshop solution for hosting services, is affected by a credit-refund double-spend race condition in the service downgrade flow. In app/Livewire/Services/Upgrade.php::doUpgrade(), the method checks Service::upgradable and later executes $credit->increment('amount', a...