TI-2026-19993 CVE-2026-24794 · GHSA-mr52-gcmh-9959Chunk Unloading Security Vulnerability in CardboardPowered/cardboardPriority MEDIUM 45Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard (src/main/java/org/cardboardpowered/impl/world modules).CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.003 · Published 2026-01-27 · Fixed CWE-119