Vendors / minetest Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now minetest records in CISA KEV No minetest vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Minetest is a free open-source voxel game engine with easy modding and game creation.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.03082 · Published 2022-08-15 · No fix listed CWE-693
Priority MEDIUM 45
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01674 · Published 2022-02-02 · No fix listed
Priority MEDIUM 41
Luanti (formerly Minetest) is an open source voxel game-creation platform.
CVSS 4.0 CRITICAL 9.0· Network · Low privileges · No interaction · EPSS 0.00374 · Published 2026-04-23 · Fixed in 5.15.2 CWE-94
Priority LOW 31
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00994 · Published 2022-02-02 · No fix listed CWE-276
Open these records in search → All records by CVSS severity
Critical3 High0 Medium1 Low0 No CVSS0