Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package mppx, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (2)
CVE-2026-34210 — CVSS 8.1 (high): mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the stripe/charge payment method did not check…
CVE-2026-34209 — CVSS 7.5 (high): mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the tempo/session cooperative close handler…