Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: ZenHive mpp 0.6.0 Clear all filters
TI-2026-42392 CVE-2026-59252 · GHSA-vp7w-82cm-hj3h

Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain

Priority HIGH 69

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0046 Published 2026-07-17 Fixed in 0.6.0 CWE-1284
TI-2026-42570 CVE-2026-59694 · GHSA-r4hx-mhrp-xf73

Unbounded access list in mpp Tempo fee-payer inflates gas cost per payment

Priority HIGH 69

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per payment by a large multiplier, degrading the sponsor's operating margin.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00382 Published 2026-07-17 Fixed in 0.6.0 CWE-1284