Pmmp vulnerabilities
33 CVEs and advisories name Pmmp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-86204PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket
- CVE-2026-86203PocketMine-MP before 5.39.2 Item Duplication via Despawn State
- CVE-2026-86202PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket
- CVE-2026-86201PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData
- CVE-2026-86200PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT
- CVE-2026-86199PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login
- CVE-2026-86198PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket
- CVE-2025-71418PocketMine-MP before 5.25.2 Denial of Service via explode
- CVE-2025-71417PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket
- CVE-2024-58381PocketMine-MP before 5.11.1 Denial of Service via LoginPacket
- CVE-2024-58380PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket
- CVE-2023-54396PocketMine-MP before 4.8.1 Server Crash via Banner NBT
- CVE-2023-54395PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket
- CVE-2023-54394PocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket
- CVE-2023-54393PocketMine-MP before 4.20.5 Denial of Service via LoginPacket
- CVE-2023-54392PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket
- CVE-2023-54390PocketMine-MP before 5.3.1 Denial of Service via LoginPacket
- CVE-2023-54355PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve
- CVE-2022-51018PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages
- CVE-2022-51017PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data
- CVE-2022-51016PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay
- CVE-2022-51015PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket
- CVE-2022-51014PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding
- CVE-2022-51013PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata
- CVE-2022-51012PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization
- CVE-2022-51011PocketMine-MP before 4.2.10 Denial of Service via Chat Messages
- CVE-2022-51010PocketMine-MP before 4.4.2 Server Crash via Item ID
- CVE-2022-51009PocketMine-MP before 4.7.2 Denial of Service via Skin Geometry
- CVE-2022-51008PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions
- CVE-2021-48007PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket