GHSA-3j63-5h8p-gf7c
Suggest an improvement- Source
- https://github.com/advisories/GHSA-3j63-5h8p-gf7c
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/08/GHSA-3j63-5h8p-gf7c/GHSA-3j63-5h8p-gf7c.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-3j63-5h8p-gf7c
- Published
- 2025-08-20T20:51:55Z
- Modified
- 2025-08-20T20:51:55Z
- Summary
- x402 SDK vulnerable in outdated versions in resource servers for builders
- Details
-
Impact
There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users' keys, smart contracts, or funds.
This primarily impacts builders working on resource servers.
Patches
Please update to the following package versions:
- x402 >= 0.5.2
- x402-next >= 0.5.2
- x402-express >= 0.5.2
- x402-hono >= 0.5.2
- Database specific
{ "cwe_ids": [], "github_reviewed": true, "github_reviewed_at": "2025-08-20T20:51:55Z", "nvd_published_at": null, "severity": "HIGH" }- References
Affected packages
npm / x402
Package
- Name
- x402
- View open source insights on deps.dev
- Purl
- pkg:npm/x402
npm / x402-next
Package
- Name
- x402-next
- View open source insights on deps.dev
- Purl
- pkg:npm/x402-next
npm / x402-express
Package
- Name
- x402-express
- View open source insights on deps.dev
- Purl
- pkg:npm/x402-express
npm / x402-hono
Package
- Name
- x402-hono
- View open source insights on deps.dev
- Purl
- pkg:npm/x402-hono