mppx

npm2 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting mppxpage 1 of 1

CVE-2026-34209HIGHCVSS 7.5EG 7.5✓ Fixed in 0.4.11
2026-03-31
mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the tempo/session cooperative close handler validated the close voucher amount using "<" instead of "<=" against the on-chain settled amount. An attacke…
CVE-2026-34210HIGHCVSS 8.1EG 8.1✓ Fixed in 0.4.11
2026-03-31
mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the stripe/charge payment method did not check Stripe's Idempotent-Replayed response header when creating PaymentIntents. An attacker could replay a val…

Check whether mppx is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for mppx CVEs against the assets you own.

Start Free Scan →