https://advisories.gitlab.com/composer/pocketmine/raklib/GMS-2023-4197/
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory...
GMS-2023-4197 pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory: Impact A client can send reliable-ordered...
https://packagist.org/packages/pocketmine/callback-validator
pocketmine/callback-validator - Packagist.org
Fork of daverandom/callback-validator - Tools for validating callback signatures
pocketminecallbackvalidatorpackagist
https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-7hmv-4j2j-pp6f/
PocketMine-MP: Network amplification vulnerability with `ActorEventPacket` | GitLab Advisory...
GHSA-7hmv-4j2j-pp6f PocketMine-MP: Network amplification vulnerability with `ActorEventPacket`: The server handles ActorEventPacket to trigger consuming...
pocketminempnetworkvulnerabilitygitlab
https://apidoc.pmmp.io/
PocketMine-MP: PocketMine-MP API Documentation
pocketminempapidocumentation
https://advisories.gitlab.com/pkg/composer/pocketmine/pocketmine-mp/GMS-2022-4/
https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GMS-2022-4/
httpsadvisoriesgitlabcomposerpocketmine
https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-f9jp-856v-8642/
PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state | GitLab...
GHSA-f9jp-856v-8642 PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state: When an entity dies, the entity is flagged for...
https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-7wrv-6h42-w54f/
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket |...
GHSA-7wrv-6h42-w54f PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket: A player sending a packet can cause the...
https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-92jh-gwch-jq38/
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency...
GHSA-92jh-gwch-jq38 PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again): An attacker could...
https://github.com/ifera-mc/UpdateNotifier
GitHub - ifera-mc/UpdateNotifier: A handy virion for PocketMine-MP plugin developers that checks if...
A handy virion for PocketMine-MP plugin developers that checks if a new release for a plugin is available on Poggit. If so then it notifies the user about the...
https://advisories.gitlab.com/composer/pocketmine/pocketmine-mp/GHSA-h6rj-3m53-887h/
PocketMine-MP: LogDoS by large complex unknown property logging in clientData in LoginPacket |...
GHSA-h6rj-3m53-887h PocketMine-MP: LogDoS by large complex unknown property logging in clientData in LoginPacket: Attackers can put large and/or complex...