Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: pmmp PocketMine-MP 5.39.2 Clear all filters
TI-2026-58993 CVE-2026-86204 · GHSA-323m-6rhr-p53j

PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket

Priority MEDIUM 64

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00436 Published 2026-09-09 Fixed in 5.39.2 CWE-400
TI-2026-58991 CVE-2026-86202 · GHSA-5g4f-vg94-wpxh

PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket

Priority LOW 24

PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00354 Published 2026-09-09 Fixed in 5.39.2 CWE-406