@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34210 via mppx (>=0.1.1, <=0.4.9)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34210 Source advisory: SNYK:JS-MPPX-15857146...

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34210 via mppx (>=0.1.1, <=0.4.9)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34210 Source advisory: OSV:GHSA-8MHJ-RFFC-RCVW...

Replay Attack

Overview mppx is a /picture Affected versions of this package are vulnerable to Replay Attack in the tempo/session cooperative close handler due to improper validation of the close voucher amount. An attacker can bypass intended restrictions by submitting a close voucher with an amount exactly...

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34209 via mppx (>=0.1.1, <=0.4.9)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34209 Source advisory: SNYK:JS-MPPX-15857147...

@0xsquid/mpp (>=0.1.1-beta.1, <=0.2.0), @economicagents/api (0.2.0) +16 more potentially affected by CVE-2026-34209 via mppx (>=0.1.1, <=0.4.9)

mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.312, =0.1.312, =0.1.312, =0.1.312, =0.2.7, =0.2.8 and more Source cves: CVE-2026-34209 Source advisory: OSV:GHSA-MV9J-8JVG-J8MR...