Skip to content
OpenAdvisories

Vendor

wevm

4 known vulnerabilities.

Products

mppx 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-34209

    mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equality

    mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the tempo/session cooperative close handler validated the close voucher amount using "<" instead of "<=" against the on-chain settled amount. An attacker could submit a clo…

    wevm mppx mppx npm