PO
Product
PocketMine-MP
33
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 22Low 2
Watch
Add PocketMine-MP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86201 | 7.5 | Sep 9 | PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData Affected: before 5.41.1 |
| CVE-2026-86199 | 7.5 | Sep 9 | PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login Affected: before 5.43.1 |
| CVE-2024-58381 | 7.5 | Sep 9 | PocketMine-MP before 5.11.1 Denial of Service via LoginPacket Affected: before 5.11.1 |
| CVE-2023-54393 | 7.5 | Sep 9 | PocketMine-MP before 4.20.5 Denial of Service via LoginPacket Affected: before 4.20.5; 4.21.0 before 4.21.1 |
| CVE-2023-54390 | 7.5 | Sep 9 | PocketMine-MP before 5.3.1 Denial of Service via LoginPacket Affected: before 4.23.1; 5.0.0 before 5.3.1 |
| CVE-2023-54355 | 7.5 | Sep 9 | PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve Affected: before 4.23.1; 5.2.0 before 5.3.1 |
| CVE-2022-51017 | 7.5 | Sep 7 | PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data Affected: 3.0.0 before 3.26.5; 4.0.0 before 4.0.5 |
| CVE-2022-51009 | 7.5 | Sep 6 | PocketMine-MP before 4.7.2 Denial of Service via Skin Geometry Affected: before 4.7.2 |
| CVE-2023-7332 | 7.1 | Dec 31 | PocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server Crash Affected: before 4.18.1 |
| CVE-2026-86204 | 6.5 | Sep 9 | PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket Affected: before 5.39.2 |
| CVE-2025-71417 | 6.5 | Sep 9 | PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket Affected: before 5.32.1 |
| CVE-2024-58380 | 6.5 | Sep 9 | PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket Affected: before 5.11.2 |
| CVE-2023-54396 | 6.5 | Sep 9 | PocketMine-MP before 4.8.1 Server Crash via Banner NBT Affected: before 4.8.1 |
| CVE-2023-54392 | 6.5 | Sep 9 | PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket Affected: 4.20.0 before 4.22.3; 5.0.0 before 5.2.1 |
| CVE-2022-51018 | 6.5 | Sep 7 | PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages Affected: 3.0.0 before 3.26.5; 4.0.0 before 4.0.5 |
| CVE-2022-51015 | 6.5 | Sep 7 | PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket Affected: before 4.0.6 |
| CVE-2022-51014 | 6.5 | Sep 7 | PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding Affected: before 4.0.7 |
| CVE-2022-51013 | 6.5 | Sep 7 | PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata Affected: before 4.2.3 |
| CVE-2022-51012 | 6.5 | Sep 7 | PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization Affected: before 4.2.9 |
| CVE-2022-51010 | 6.5 | Sep 7 | PocketMine-MP before 4.4.2 Server Crash via Item ID Affected: before 4.4.2 |
| CVE-2021-48007 | 6.5 | Sep 6 | PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket Affected: before 3.18.1 |
| CVE-2020-37277 | 6.5 | Sep 6 | PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction Affected: before 3.15.4 |
| CVE-2022-51016 | 6.1 | Sep 7 | PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay Affected: 3.0.0 before 3.27.0 |
| CVE-2026-86200 | 5.3 | Sep 9 | PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT Affected: before 5.42.1 |
| CVE-2025-71418 | 5.3 | Sep 9 | PocketMine-MP before 5.25.2 Denial of Service via explode Affected: before 5.25.2 |
| CVE-2022-51008 | 5.3 | Sep 6 | PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions Affected: 4.0.0 before 4.12.3 |
| CVE-2026-86202 | 4.3 | Sep 9 | PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket Affected: before 5.39.2 |
| CVE-2023-54395 | 4.3 | Sep 9 | PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket Affected: before 4.12.5 |
| CVE-2023-54394 | 4.3 | Sep 9 | PocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket Affected: before 4.18.0-ALPHA2 |
| CVE-2022-51011 | 4.3 | Sep 7 | PocketMine-MP before 4.2.10 Denial of Service via Chat Messages Affected: before 4.2.10 |
| CVE-2026-86198 | 4.2 | Sep 9 | PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket Affected: before 5.44.2 |
| CVE-2026-86203 | 3.7 | Sep 9 | PocketMine-MP before 5.39.2 Item Duplication via Despawn State Affected: before 5.39.2 |
| CVE-2021-48006 | 3.3 | Sep 6 | PocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivity Affected: before 4.0.3 |
Showing 33