GHSA-8x4m-qw58-3pcx
NoneCVSS
—
EPSS
—
Published
Mar 29, 2026
CISA due date
—
The record
mppx has multiple payment bypass and griefing vulnerabilities
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | mppx | 0 | 0.4.8 |
Related vulnerabilities
- CVE-2026-34210 mppx is a TypeScript interface for machine payments protocol. Also affects mppx
- CVE-2026-34209 mppx is a TypeScript interface for machine payments protocol. Also affects mppx
- GHSA-8mhj-rffc-rcvw mppx has Stripe charge credential replay via missing idempotency check Also affects mppx
- GHSA-mv9j-8jvg-j8mr mppx: Tempo has a session close voucher bypass vulnerability due to settled amount… Also affects mppx
- CVE-2026-114732 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper… CWE-288
- CVE-2026-96387 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop… CWE-288
- CVE-2026-96385 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST &… CWE-288
- CVE-2026-84923 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email… CWE-288