CVE-2026-1989

Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-1989

Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-1989 IDOR in PAVO Inc.'s PAVO Pay

Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-1989

Technical details of CVE-2026-1989 are not publicly available in the provided documents; monitor for updates.

EUVD-2026-42553

Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

EUVD-2025-177735

Malicious code in multiverse-pavo-dependencies-enif npm...

EUVD-2025-175488

Malicious code in xerxes-paleontology-dorado-pavo npm...

EUVD-2025-177295

Malicious code in pavo-colors-taurus-eslint-plugin npm...

EUVD-2025-179037

Malicious code in eslint-plugin-husky-pavo-virgo npm...

EUVD-2025-177909

Malicious code in meissa-pavo-asthenosphere-aurora npm...

EUVD-2025-177722

Malicious code in mysql-fork-pavo-firebase npm...

EUVD-2025-180474

Malicious code in aldebaran-biosignature-darkenergy-pavo npm...

EUVD-2025-177294

Malicious code in pavo-hapi-hyperion-rollup-plugin npm...

Malicious code in pavo-helmet-titan-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d76136c9f3dc8a08d2551ba3a769c56e61203352b817ce641ee74bd69da7498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179461

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo npm...

Malicious code in pavo-colors-taurus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4822eb2e312a8df244e9a3d06ff9c91bcb9d9f9cf6fdc56dedac94c979d42c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180266

Malicious code in async-iota-pavo-quasar npm...

EUVD-2025-178121

Malicious code in less-pavo-restart-start npm...

EUVD-2025-177293

Malicious code in pavo-helmet-titan-kinetic npm...

EUVD-2025-178425

Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo npm...