Wevm vulnerabilities
We track 2 vulnerabilities in Wevm products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Wevm vulnerabilities
- 8.1 High severity
mppx: Incorrect Comparison
mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the stripe/charge payment method did not check Stripe's Idempotent-Replayed response header when creating PaymentIntents. An attacker could replay a valid credential contain
- 7.5 High severity
mppx: Authentication Bypass by Capture-replay
mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the tempo/session cooperative close handler validated the close voucher amount using "<" instead of "<=" against the on-chain settled amount. An attacker could submit a clos