PT-2025-35384 · Npm · X402+3

Publicado 2025-08-20 · Atualizado 2025-08-20

OSV

Impact

There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users' keys, smart contracts, or funds.

This primarily impacts builders working on resource servers.

Patches

Please update to the following package versions:

• x402 >= 0.5.2
• x402-next >= 0.5.2
• x402-express >= 0.5.2
• x402-hono >= 0.5.2

Identificadores relacionados

GHSA-3J63-5H8P-GF7C

Produtos afetados

X402

X402-Express

X402-Hono

X402-Next

Referências · 3

• https://github.com/coinbase/x402 · Nota
• https://github.com/coinbase/x402/security/advisories/GHSA-3j63-5h8p-gf7c · Nota
• https://osv.dev/vulnerability/GHSA-3j63-5h8p-gf7c · Aviso do Fabricante