Current section
13 Advisories
Jump to
Current section
13 Advisories
mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-87119.html
- https://github.com/ZenHive/mpp/commit/4b6eaec02af0e8485cfb4ff68f467d075ed5dd6f
- https://github.com/ZenHive/mpp/commit/db464dfa9a86ccda58f0827101f6da6bd8aafa78
- https://github.com/ZenHive/mpp/security/advisories/GHSA-p9fv-9w58-95x2
- https://hex.pm/packages/mpp
Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-89420.html
- https://github.com/ZenHive/mpp/commit/7270edc1dcfb58250cc5ee812876609206564165
- https://github.com/ZenHive/mpp/commit/82df569c898be1137189e3648e1edb4af6363651
- https://github.com/ZenHive/mpp/security/advisories/GHSA-8c63-r789-xrrf
- https://hex.pm/packages/mpp
mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-88255.html
- https://github.com/ZenHive/mpp/commit/e12bd4a1cea2e97c2a01fc059c48e5594a7b4a43
- https://github.com/ZenHive/mpp/commit/f8904666061fbab695874856d8fcd02c471dfe1b
- https://github.com/ZenHive/mpp/security/advisories/GHSA-8x7x-5j8g-8hcx
- https://hex.pm/packages/mpp
mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-89186.html
- https://github.com/ZenHive/mpp/commit/2d4d1d94aae7790ae0623063961adbeef171fa71
- https://github.com/ZenHive/mpp/commit/2fd91a5ecbd0b0ad2a4ac202b79659e8126dbc0b
- https://github.com/ZenHive/mpp/security/advisories/GHSA-82qh-vrvm-gqvc
- https://hex.pm/packages/mpp
Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
Affected Versions
Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
Affected Versions
On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay
Affected Versions
Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain
Affected Versions
Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay
Affected Versions
Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race
Affected Versions
Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain
Affected Versions
Unbounded access list in mpp Tempo fee-payer inflates gas cost per payment
Affected Versions
Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain
Affected Versions
