CVE-2026-34209

The record

mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the tempo/session cooperative close handler validated the close voucher amount using "<" instead of "<=" against the on-chain settled amount. An attacker could submit a close voucher exactly equal to the settled amount, which would be accepted without committing any new funds, effectively closing or griefing the channel for free. This issue has been patched in version 0.4.11.

Affected packages

Related vulnerabilities

• GHSA-mv9j-8jvg-j8mr mppx: Tempo has a session close voucher bypass vulnerability due to settled amount… Same vulnerability
• CVE-2026-34210 mppx is a TypeScript interface for machine payments protocol. Also affects mppx
• GHSA-8x4m-qw58-3pcx mppx has multiple payment bypass and griefing vulnerabilities Also affects mppx
• GHSA-8mhj-rffc-rcvw mppx has Stripe charge credential replay via missing idempotency check Also affects mppx
• CVE-2026-87952 Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service… CWE-294
• CVE-2026-88278 GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce… CWE-294
• CVE-2026-55250 Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0… CWE-294
• CVE-2026-73312 XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers… CWE-294