DINOPAY
- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
DINO PAY® is the official mobile app of Sinclair Oil—designed to make fueling faster, easier, and more rewarding. Locate Sinclair gas stations and truck stops with ease, and quickly identify locations with amenities like car washes, air, and water. Then skip the swipe, dip, and tap—pay securely for fuel and in-store purchases using only your mobile device at participating Sinclair locations. Why DINO PAY? • Save at least 10¢ per gallon on every fill-up* • Secure, contactless payment right from your phone • Find nearby Sinclair locations with built-in navigation and amenities • Track your purchases and savings in one place • Play games and earn rewards for even bigger discounts Whether you’re commuting or hitting the road, DINO PAY helps you go farther for less—every time you fill up. Download today and start saving. *Up to 35 gallons at participating U.S. locations
Data collected and shared
Source: App Store · App Privacy · 5 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
FAQ
FAQ: DINOPAY
Why are no CVEs listed for DINOPAY?
No CVE is currently referenced in NVD for DINOPAY (com.affinityamp.sinclairoil) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of DINOPAY?
The most recent version of DINOPAY (com.affinityamp.sinclairoil) tracked by Appaloosa Scout is 6.0.4, published by P97 Networks, Inc..