Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/10/07 6:03 p.m.•8 views

mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control

Impact Both packages wrap an mppx payment method so that a wallet meeting on-chain conditions is granted free access instead of being charged. The free-access path reads the payer address from credential.source — a client-supplied DID in the payment credential — asks InsumerAPI whether that addre...

7.5CVSS5.8AI score0.00282EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2026/10/07 6:03 p.m.•6 views

GHSA-JG6Q-3QFH-R9F8 mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control

Impact Both packages wrap an mppx payment method so that a wallet meeting on-chain conditions is granted free access instead of being charged. The free-access path reads the payer address from credential.source — a client-supplied DID in the payment credential — asks InsumerAPI whether that addre...

7.5CVSS5.8AI score0.00282EPSS
SaveExploits0References6
Rows per page
Query Builder