x402 SDK vulnerable in outdated versions in resource servers for builders - x402-next
- Severity:
- High
Description
There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users’ keys, smart contracts, or funds.
This primarily impacts builders working on resource servers.
Recommendation
Update the x402-next package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.5.2
- Patched version(s): 0.5.2
References
Related Issues
- x402 SDK vulnerable in outdated versions in resource servers for builders - x402 - Vulnerability
- x402 SDK vulnerable in outdated versions in resource servers for builders - x402-express - Vulnerability
- x402 SDK vulnerable in outdated versions in resource servers for builders - Vulnerability
- Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint - CVE-2023-46729
You might also like:
- Tags:
- npm
- x402-next
Anything's wrong? Let us know Last updated on August 20, 2025