Skip to content

Pmmp Pocketmine-mp vulnerabilities

pmmp pocketmine-mpPocketMine-MP before 5.43.1 Denial of Service via unauthenticated loginCVE-2026-861998.7 HighSeptember 9, 2026
pmmp pocketmine-mpPocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacketCVE-2026-86198Fix available2.3 LowSeptember 9, 2026
pmmp pocketmine-mpPocketMine-MP before 4.12.3 Denial of Service via Unauthenticated SessionsCVE-2022-510086.9 MediumSeptember 6, 2026
pmmp pocketmine-mpPocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWTCVE-2026-86200Fix available6.9 MediumApril 15, 2026
pmmp pocketmine-mpPocketMine-MP before 5.39.2 Item Duplication via Despawn StateCVE-2026-86203Fix available6.3 MediumApril 6, 2026
pmmp pocketmine-mpPocketMine-MP before 5.39.2 Network Amplification via ActorEventPacketCVE-2026-86202Fix available5.3 MediumApril 6, 2026
pmmp pocketmine-mpPocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacketCVE-2026-86204Fix available7.1 HighApril 6, 2026
pmmp pocketmine-mpPocketMine-MP before 5.41.1 LogDoS via LoginPacket clientDataCVE-2026-86201Fix available8.7 HighApril 6, 2026
pmmp pocketmine-mpPocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacketCVE-2025-71417Fix available7.1 HighSeptember 2, 2025
pmmp pocketmine-mpPocketMine-MP before 5.25.2 Denial of Service via explodeCVE-2025-71418Fix available6.9 MediumMarch 10, 2025
pmmp pocketmine-mpPocketMine-MP before 5.11.1 Denial of Service via LoginPacketCVE-2024-58381Fix available8.7 HighMarch 6, 2024
pmmp pocketmine-mpPocketMine-MP before 5.11.2 Denial of Service via BookEditPacketCVE-2024-58380Fix available7.1 HighMarch 6, 2024
pmmp pocketmine-mpPocketMine-MP before 5.3.1 Denial of Service via LoginPacketCVE-2023-54390Fix available8.7 HighSeptember 14, 2023
pmmp pocketmine-mpPocketMine-MP 5.2.0 Server Crash via Incorrect EC CurveCVE-2023-54355Fix available8.7 HighSeptember 14, 2023
pmmp pocketmine-mpPocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacketCVE-2023-54392Fix available7.1 HighJuly 14, 2023
pmmp pocketmine-mpPocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server CrashCVE-2023-7332Fix available7.1 HighJune 6, 2023
pmmp pocketmine-mpPocketMine-MP before 4.20.5 Denial of Service via LoginPacketCVE-2023-54393Fix available8.7 HighJune 6, 2023
pmmp pocketmine-mpPocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacketCVE-2023-54394Fix available5.3 MediumJune 1, 2023
pmmp pocketmine-mpPocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacketCVE-2023-54395Fix available5.3 MediumJanuary 10, 2023
pmmp pocketmine-mpPocketMine-MP before 4.8.1 Server Crash via Banner NBTCVE-2023-54396Fix available7.1 HighJanuary 9, 2023
pmmp pocketmine-mpPocketMine-MP before 4.7.2 Denial of Service via Skin GeometryCVE-2022-51009Fix available8.7 HighAugust 18, 2022
pmmp pocketmine-mpPocketMine-MP before 4.4.2 Server Crash via Item IDCVE-2022-51010Fix available7.1 HighJune 7, 2022
pmmp pocketmine-mpPocketMine-MP before 4.2.10 Denial of Service via Chat MessagesCVE-2022-51011Fix available5.3 MediumMay 25, 2022
pmmp pocketmine-mpPocketMine-MP before 4.2.9 Denial of Service via NBT DeserializationCVE-2022-51012Fix available7.1 HighApril 22, 2022
pmmp pocketmine-mpPocketMine-MP before 4.2.3 Denial of Service via NBT MetadataCVE-2022-51013Fix available7.1 HighMarch 18, 2022
pmmp pocketmine-mpPocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacketCVE-2021-48007Fix available7.1 HighMarch 18, 2022
pmmp pocketmine-mpPocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login ReplayCVE-2022-51016Fix available5.3 MediumJanuary 21, 2022
pmmp pocketmine-mpPocketMine-MP before 4.0.7 Denial of Service via JSON DecodingCVE-2022-51014Fix available7.1 HighJanuary 21, 2022
pmmp pocketmine-mpPocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacketCVE-2022-51015Fix available7.1 HighJanuary 13, 2022
pmmp pocketmine-mpPocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin DataCVE-2022-51017Fix available8.7 HighJanuary 6, 2022
pmmp pocketmine-mpPocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book PagesCVE-2022-51018Fix available7.1 HighJanuary 6, 2022
pmmp pocketmine-mpPocketMine-MP before 4.0.3 Operator Privilege Escalation via Case SensitivityCVE-2021-48006Fix available4.8 MediumDecember 16, 2021
pmmp pocketmine-mpPocketMine-MP before 3.15.4 Denial of Service via InventoryTransactionCVE-2020-37277Fix available7.1 HighNovember 11, 2020