Is there a patch available for CVE-2026-26063?

Yes, a patch is available for CVE-2026-26063. Update the affected software to the latest version immediately.

CediPay CVE-2026-26063

Improper Input Validation (CWE-20)

2026-02-19 security-advisories@github.com

GHSA-wvr6-395c-5pxr

Code Injection

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 22:03 vuln.today

CVE Published

Feb 19, 2026 - 20:25 nvd

N/A

DescriptionCVE.org

CediPay is a crypto-to-fiat app for the Ghanaian market. A vulnerability in CediPay prior to version 1.2.3 allows attackers to bypass input validation in the transaction API. The issue has been fixed in version 1.2.3. If upgrading is not immediately possible, restrict API access to trusted networks or IP ranges; enforce strict input validation at the application layer; and/or monitor transaction logs for anomalies or suspicious activity. These mitigations reduce exposure but do not fully eliminate the vulnerability.

AnalysisAI

Technical ContextAI

This vulnerability (CWE-20: Improper Input Validation) affects CediPay is a crypto-to-fiat app for the Ghanaian market. A vulnerability in CediPay. CediPay is a crypto-to-fiat app for the Ghanaian market. A vulnerability in CediPay prior to version 1.2.3 allows attackers to bypass input validation in the transaction API. The issue has been fixed in version 1.2.3. If upgrading is not immediately possible, restrict API access to trusted networks or IP ranges; enforce strict input validation at the application layer; and/or monitor transaction logs for anomalies or suspicious activity. These mitigations reduce exposure but do not fully elimina