Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Patched Functions
Zenhive
Mpp

ZenHive/mpp: Functions Patched by CVE Fixes

elixir

#457 of 500 repositories

ZenHive/mpp

Functions and files changed by CVE fixes in this repository.

Latest located fix September 22, 2026

13

CVE fixes located

Published CVEs

96

Functions patched

Distinct function sites

43

Files patched

Distinct source files

2026

Years covered

By CVE publication date

Overview

13 published CVEs have a fix traced to functions in ZenHive/mpp, the earliest published in 2026. Those fixes changed 96 distinct functions across 43 files, in 854 patch hunks.

Among the 500 repositories tracked here, ZenHive/mpp ranks #457 by the number of CVEs with a located fix.

On this page

Overview
Most patched functions
Most patched files
Fix size
Latest CVEs
Other repositories
FAQ
References

Most patched functions

Functions in ZenHive/mpp changed by the most CVE fixes.

1maybe_validate_fee_payer_economicslib/mpp/methods/tempo.ex3 CVEs · 3 patches2026
2non_neg_integerlib/mpp/methods/tempo/fee_payer_policy.ex3 CVEs · 2 patches2026
3challengelib/mpp/telemetry.ex2 CVEs · 2 patches2026
4verify_oklib/mpp/telemetry.ex2 CVEs · 2 patches2026
5receiptlib/mpp/telemetry.ex2 CVEs · 2 patches2026
6integerlib/mpp/telemetry.ex2 CVEs · 2 patches2026
7verifylib/mpp/methods/tempo.ex2 CVEs · 2 patches2026
8verify_startlib/mpp/telemetry.ex2 CVEs · 2 patches2026
9validate_intentlib/mpp/plug.ex2 CVEs · 2 patches2026
10verify_faillib/mpp/telemetry.ex2 CVEs · 2 patches2026
11maplib/mpp/plug.ex2 CVEs · 2 patches2026
12intent_namelib/mpp/plug.ex2 CVEs · 2 patches2026
13broadcast_and_verifylib/mpp/methods/tempo.ex2 CVEs · 2 patches2026
14validate_sponsor_policylib/mpp/methods/tempo/subscription_transaction.ex2 CVEs · 1 patches2026
15check_authorization_listlib/mpp/methods/tempo/fee_payer_policy.ex2 CVEs · 1 patches2026

Most patched files

Files in ZenHive/mpp changed by the most CVE fixes.

1lib/mpp/methods/tempo.ex8 CVEs · 13 functions
2lib/mpp/methods/tempo/fee_payer_policy.ex5 CVEs · 9 functions
3lib/mpp/plug.ex4 CVEs · 10 functions
4lib/mpp/methods/tempo/subscription_transaction.ex3 CVEs · 1 functions
5lib/mpp/telemetry.ex2 CVEs · 7 functions
6lib/mpp/session/channel.ex2 CVEs · 6 functions
7lib/mpp/verifier.ex2 CVEs · 5 functions
8lib/mpp/session/method.ex2 CVEs · 2 functions
9lib/mpp/tempo/store.ex2 CVEs · 2 functions
10test/mpp/methods/tempo_test.exs2 CVEs · 2 functions

Fix size

How much code a CVE fix in ZenHive/mpp changes, with backports counted once.

303

Median lines changed

Added plus removed, per CVE

8%

Fixes of 20 lines or fewer

Share of CVE fixes

0%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in ZenHive/mpp, and the functions each fix changed.

mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed
CVE-2026-87119parse_authorization start_link put_wallet_witness
High · CVSS 8.2
EPSS 0.6%2026-09-22
Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
CVE-2026-89420keyword names available_balance
High · CVSS 7.1
EPSS 0.4%2026-09-22
mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot
CVE-2026-88255canonicalize_transaction validate_store get
Medium · CVSS 6.3
EPSS 0.5%2026-09-16
mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches
CVE-2026-89186register_receipt_headers register_response_headers call
Medium · CVSS 6.3
EPSS 0.5%2026-09-16
Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
CVE-2026-82750check_authorization_list apply_overrides expect_key_authorization
High · CVSS 8.3
EPSS 0.5%2026-09-06
Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
CVE-2026-82751check_authorization_list apply_overrides expect_key_authorization
High · CVSS 8.3
EPSS 0.5%2026-09-06
On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay
CVE-2026-67581check_hash_unused implementing verify_transfer
High · CVSS 8.7
EPSS 0.6%2026-08-19
Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain
CVE-2026-73541maybe_validate_fee_payer_economics update validate_sponsor_budget
High · CVSS 8.3
EPSS 0.6%2026-08-19
Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay
CVE-2026-73136validate_memo_store_binding
High · CVSS 8.2
EPSS 0.6%2026-08-19
Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race
CVE-2026-73829mark_hash_used
Medium · CVSS 6.3
EPSS 0.3%2026-08-19
Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain
CVE-2026-59252broadcast_and_verify
High · CVSS 8.2
EPSS 0.6%2026-07-17
Unbounded access list in mpp Tempo fee-payer inflates gas cost per payment
CVE-2026-59694valid_tx econ_tx design
High · CVSS 8.3
EPSS 0.5%2026-07-17

Get an alert for each new ZenHive/mpp CVE, with the patched functions and AI-written analysis.

Monitor mpp CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

apache/kylin13 CVEs apache/superset13 CVEs bagisto/bagisto13 CVEs better-auth/better-auth13 CVEs caddyserver/caddy13 CVEs cerebrate-project/cerebrate13 CVEs CoreWCF/CoreWCF13 CVEs craftcms/commerce13 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in ZenHive/mpp.

How many CVEs have a located fix in ZenHive/mpp?: 13 published CVEs have a fix traced to functions in ZenHive/mpp, touching 96 functions across 43 files.
Which function in ZenHive/mpp has been patched by the most CVEs?: maybe_validate_fee_payer_economics in lib/mpp/methods/tempo.ex has been changed by 3 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in ZenHive/mpp?: The median fix changes 303 lines. 8% of fixes change 20 lines or fewer, and 0% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

ZenHive/mpp on GitHub (opens in a new tab)
Patched functions directory
CWE directory: the weakness types behind these fixes

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track ZenHive/mpp CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing