This repository was archived by the owner on Jul 9, 2026. It is now read-only.
Security: pmmp/PocketMine-MP
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Invalid skin geometry JSON data leading to server crashGHSA-8cwq-4cmf-px73 published
Aug 16, 2022 by dktappsHigh -
Improperly checked IDs on itemstacks received from the client leading to server crashGHSA-fqx3-r75h-vc89 published
Jun 7, 2022 by dktappsModerate -
Denial-of-service vulnerability processing large chat messages containing many newlinesGHSA-gj94-v4p9-w672 published
May 22, 2022 by dktappsModerate -
Insufficient type validation of NBT during decoding of network items for inventory transactionsGHSA-g5rr-p69h-7v3g published
Apr 19, 2022 by dktappsModerate -
Improperly checked metadata on tools/armour itemstacks received from the clientGHSA-46c5-pfj8-fv65 published
Mar 18, 2022 by dktappsModerate -
Unhandled exception when decoding form response JSONGHSA-wjfq-88q2-r34j published
Jan 21, 2022 by dktappsModerate -
Unchecked validity of Facing values in PlayerActionPacketGHSA-xh99-hw7h-wf63 published
Jan 13, 2022 by dktappsModerate -
Impersonation of other users (passing XBOX Live authentication) by theft of loginsGHSA-h79x-98r2-g6qc published
Jan 21, 2022 by dktappsModerate -
Uncapped length of skin data fields submitted by playersGHSA-c6fg-99pr-25m9 published
Jan 4, 2022 by dktappsHigh -
Book page text, count, and author/title length is not limitedGHSA-p62j-hrxm-xcxf published
Jan 4, 2022 by dktappsModerate