mppx vulnerabilities

2 known vulnerabilities in mppx from Wevm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  mppx: Incorrect Comparison

  CVE-2026-34210Mar 31, 2026Wevm

  mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the stripe/charge payment method did not check Stripe's Idempotent-Replayed response header when creating PaymentIntents. An attacker could replay a valid credential contain

• 7.5 High severity

  mppx: Authentication Bypass by Capture-replay

  CVE-2026-34209Mar 31, 2026Wevm

  mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the tempo/session cooperative close handler validated the close voucher amount using "<" instead of "<=" against the on-chain settled amount. An attacker could submit a clos