npm/mppx CVE-2026-63627: medium 6.9, EPSS 0.52%

mppx: Gas Draining with padding

Action: Upgrade mppx to 0.8.2 or later.

npm i mppx@0.8.2

Affected

Fixed versions

Sources

• osv: GHSA-727h-3vm5-qwq6
• nvd: CVE-2026-63627
• https://github.com/wevm/mppx/security/advisories/GHSA-727h-3vm5-qwq6
• https://github.com/wevm/mppx/pull/602
• https://github.com/wevm/mppx/commit/24ddcca719ae282977d8747309ed1275ea282b25
• https://github.com/wevm/mppx
• https://github.com/wevm/mppx/releases/tag/mppx@0.8.2

CVE-2026-63627 · published 2026-09-22T20:34:17Z · modified 2026-09-22T21:00:04.733697025Z · JSON