GHSA-8mhj-rffc-rcvw
NoneCVSS
—
EPSS
—
Published
Mar 29, 2026
CISA due date
—
The record
mppx has Stripe charge credential replay via missing idempotency check
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | mppx | 0 | 0.4.11 |
Related vulnerabilities
- CVE-2026-34210 mppx is a TypeScript interface for machine payments protocol. Same vulnerability
- CVE-2026-34209 mppx is a TypeScript interface for machine payments protocol. Also affects mppx
- GHSA-8x4m-qw58-3pcx mppx has multiple payment bypass and griefing vulnerabilities Also affects mppx
- GHSA-mv9j-8jvg-j8mr mppx: Tempo has a session close voucher bypass vulnerability due to settled amount… Also affects mppx
- CVE-2026-101913 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in… CWE-697
- CVE-2026-101912 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in… CWE-697
- CVE-2026-90711 proxy-addr is a Node.js module that determines a request's client address behind trusted… CWE-697
- CVE-2026-64836 ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control… CWE-697