Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: pmmp PocketMine-MP 4.23.1, 5.3.1 Clear all filters
TI-2023-30640 CVE-2023-54390 · GHSA-q3ff-jxcw-jc3j

PocketMine-MP before 5.3.1 Denial of Service via LoginPacket

Priority MEDIUM 45

PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00609 Published 2026-09-09 Fixed in 4.23.1, 5.3.1 CWE-1025
TI-2023-30628 CVE-2023-54355 · GHSA-7j9c-9c4f-5ff9

PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve

Priority MEDIUM 44

PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00383 Published 2026-09-09 Fixed in 4.23.1, 5.3.1 CWE-347