GHSA-3j63-5h8p-gf7c: x402 SDK vulnerable in outdated versions in resource servers for builders

August 20, 2025

There is a security vulnerability in outdated versions of the x402 SDK. This does not directly affect users’ keys, smart contracts, or funds.

This primarily impacts builders working on resource servers.

References

github.com/advisories/GHSA-3j63-5h8p-gf7c
github.com/coinbase/x402
github.com/coinbase/x402/security/advisories/GHSA-3j63-5h8p-gf7c

Code Behaviors & Features

Detect and mitigate GHSA-3j63-5h8p-gf7c with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →