Security advisories

high2022-04-22

Insufficient type validation in pocketmine/pocketmine-mp

GHSA-g5rr-p69h-7v3g

high2022-03-18

Improperly checked metadata on tools/armour itemstacks received from the client

GHSA-46c5-pfj8-fv65

medium2022-01-21

Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP

GHSA-h79x-98r2-g6qc

high2022-01-21

Unhandled exception when decoding form response JSON

GHSA-wjfq-88q2-r34j

high2022-01-13

Unchecked validity of Facing values in PlayerActionPacket

GHSA-xh99-hw7h-wf63

high2022-01-06

Uncapped length of skin data fields submitted by players

GHSA-c6fg-99pr-25m9

medium2022-01-06

Book page text, count, and author/title length is not limited in PocketMine-MP

GHSA-p62j-hrxm-xcxf

low2021-12-16

Inability to de-op players if listed in ops.txt with non-lowercase letters

GHSA-j5qg-w9jg-3wg3