CVE-2026-63634

The pympp Python SDK for the Machine Payments Protocol is vulnerable to a gas inflation attack in versions prior to 0.9.1 . When acting as the fee_payer , the server validates calldata using eth_abi decoding , which allows for lenient trailing bytes. While the FeePayerPolicy enforces caps on gas_...