BTCPay Server prior to 1.0.6.0, when the payment button is used, has a privacy vulnerability.
btcpayserver btcpay server