Packages

mpp

0.10.0
0.10.0 0.9.0 0.8.0 0.7.0 0.6.4 0.6.3 0.6.2 0.6.1 0.6.0 0.4.0 0.3.2 0.3.1 0.3.0 0.2.0 0.1.1 0.1.0 0.0.1

Elixir implementation of the Machine Payments Protocol (MPP) — HTTP 402 payment middleware for AI agents and machine-to-machine commerce. Supports Stripe, Tempo, and generic EVM payment methods with pluggable architecture.

HexDocs

Current section

3 Advisories

Jump to
Readme
17 Versions
8 Dependencies
0 Dependants
3 Advisories
Files
Activity
EEF-CVE-2026-59252 CVE-2026-59252 GHSA-vj8p-hp9x-gh47

Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain

July 17, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.2.0 and < 0.6.0
EEF-CVE-2026-59694 CVE-2026-59694 GHSA-qpxh-ff8m-c62v

Unbounded access list in mpp Tempo fee-payer inflates gas cost per payment

July 17, 2026
CVSS
?
8.3 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Affected Versions

>= 0.2.0 and < 0.6.0
EEF-CVE-2026-59695 CVE-2026-59695 GHSA-vv77-66rf-pm86

Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain

July 17, 2026
CVSS
?
8.3 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.2.0 and < 0.6.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 20 40 60 80

this version

48

yesterday

0

last 7 days

16

all time

827

Last Updated

Jul 09, 2026

License

MIT

Build Tools

mix

Publisher

e.fu e.fu

Links

Owners