x402 SDK Security Advisory

High

apmcdermott-cb published GHSA-3j63-5h8p-gf7c

Aug 20, 2025

Package

x402 (npm)

Affected versions

< 0.5.2

Patched versions

>= 0.5.2

x402-express (npm)

< 0.5.2

>= 0.5.2

x402-hono (npm)

< 0.5.2

>= 0.5.2

x402-next (npm)

< 0.5.2

>= 0.5.2

Description

Impact

There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users' keys, smart contracts, or funds.

This primarily impacts builders working on resource servers.

Patches

Please update to the following package versions:

x402 >= 0.5.2
x402-next >= 0.5.2
x402-express >= 0.5.2
x402-hono >= 0.5.2