VYPR

pympp

by Tempoxyz

CVEs (1)

  • CVE-2026-63634Nov 9, 2026
    risk 0.00cvss —epss —

    pympp is a Python SDK for the Machine Payments Protocol. Prior to version 0.9.1, when the server acts as the fee_payer, pympp validates calldata using eth_abi decoding, which is lenient about trailing bytes. The FeePayerPolicy caps gas_limit (≤ 2 M) and max_fee_per_gas (≤…