npm/@insumermodel/mppx-token-gate CVE-2026-104891: high 7.5, EPSS 0.28%
mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control
Action: Upgrade @insumermodel/mppx-token-gate to 1.0.4 or later.
npm i @insumermodel/mppx-token-gate@1.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.4 | - |
Fixed versions
| 1.0.4 |
Sources
- osv: GHSA-jg6q-3qfh-r9f8#npm/@insumermodel/mppx-token-gate
- https://github.com/douglasborthwick-crypto/mppx-condition-gate/security/advisories/GHSA-jg6q-3qfh-r9f8
- https://github.com/insumerapi/mppx-condition-gate/security/advisories/GHSA-jg6q-3qfh-r9f8
- https://nvd.nist.gov/vuln/detail/CVE-2026-104891
- https://github.com/insumerapi/mppx-condition-gate/commit/b1d9935a57ba6d32da49eead1bfb459ad0cd55ab
- https://github.com/insumerapi/mppx-condition-gate/commit/ec43a2fcd443a0fa102b6d4203abed2b785bd954
- https://github.com/douglasborthwick-crypto/mppx-condition-gate
CVE-2026-104891 · published · modified · JSON