Robuta

https://advisories.gitlab.com/composer/pocketmine/raklib/GMS-2023-4197/ pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory... GMS-2023-4197 pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory: Impact A client can send reliable-ordered... https://packagist.org/packages/pocketmine/callback-validator pocketmine/callback-validator - Packagist.org Fork of daverandom/callback-validator - Tools for validating callback signatures pocketminecallbackvalidatorpackagist https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-7hmv-4j2j-pp6f/ PocketMine-MP: Network amplification vulnerability with `ActorEventPacket` | GitLab Advisory... GHSA-7hmv-4j2j-pp6f PocketMine-MP: Network amplification vulnerability with `ActorEventPacket`: The server handles ActorEventPacket to trigger consuming... pocketminempnetworkvulnerabilitygitlab https://apidoc.pmmp.io/ PocketMine-MP: PocketMine-MP API Documentation pocketminempapidocumentation https://advisories.gitlab.com/pkg/composer/pocketmine/pocketmine-mp/GMS-2022-4/ https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GMS-2022-4/ httpsadvisoriesgitlabcomposerpocketmine https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-f9jp-856v-8642/ PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state | GitLab... GHSA-f9jp-856v-8642 PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state: When an entity dies, the entity is flagged for... https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-7wrv-6h42-w54f/ PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket |... GHSA-7wrv-6h42-w54f PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket: A player sending a packet can cause the... https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-92jh-gwch-jq38/ PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency... GHSA-92jh-gwch-jq38 PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again): An attacker could... https://github.com/ifera-mc/UpdateNotifier GitHub - ifera-mc/UpdateNotifier: A handy virion for PocketMine-MP plugin developers that checks if... A handy virion for PocketMine-MP plugin developers that checks if a new release for a plugin is available on Poggit. If so then it notifies the user about the... https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-h6rj-3m53-887h/ PocketMine-MP: LogDoS by large complex unknown property logging in clientData in LoginPacket |... GHSA-h6rj-3m53-887h PocketMine-MP: LogDoS by large complex unknown property logging in clientData in LoginPacket: Attackers can put large and/or complex...