{"action":"Upgrade x402-express to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"x402-express","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-3j63-5h8p-gf7c","id":"tcs_01M5KEXHD78211N2Z2H4SDB1F4","modified_at":"2025-08-20T20:51:55Z","published_at":"2025-08-20T20:51:55Z","references":["https://osv.dev/vulnerability/GHSA-3j63-5h8p-gf7c","https://github.com/coinbase/x402/security/advisories/GHSA-3j63-5h8p-gf7c","https://github.com/coinbase/x402"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-3j63-5h8p-gf7c#npm/x402-express","url":"https://osv.dev/vulnerability/GHSA-3j63-5h8p-gf7c"}],"summary":"x402 SDK vulnerable in outdated versions in resource servers for builders"}