Verified Advisories

Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 3 total.

Severity: All Critical High

Library: mpp

CVE-2026-59252 HIGH CVSS 8.2 Verified Advisory Jul 17, 2026

Improper input validation in the ZenHive mpp Elixir library (CVE-2026-59252)

CVE-2026-59252 is an improper input validation vulnerability in the ZenHive mpp Elixir library affecting deployments configured as a fee payer. When acting as fee payer, mpp co-signs and broadcasts client-supplied EVM...

Fixed in 0.6.0

Denial Of Service Mpp

CVE-2026-59694 HIGH CVSS 8.3 Verified Advisory Jul 17, 2026

Improper input validation in ZenHive mpp (CVE-2026-59694)

CVE-2026-59694 is an improper input validation vulnerability in ZenHive mpp (Elixir) affecting the fee-payer co-signing flow. When configured as fee payer, `MPP.Tempo.Transaction.cosign_fee_payer/3` re-signs the clien...

Fixed in 0.6.0

Information Disclosure Mpp

CVE-2026-59695 HIGH CVSS 8.3 Verified Advisory Jul 17, 2026

Improper input validation in the ZenHive mpp Elixir library (CVE-2026-59695)

CVE-2026-59695 is an improper input validation vulnerability in the ZenHive mpp Elixir library whereby `cosign_fee_payer/3` in transaction.ex co-signs client-supplied `max_fee_per_gas` and `max_priority_fee_per_gas` f...

Fixed in 0.6.0

Information Disclosure Mpp