PkgSeer

Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
pocketmine/pocketmine-mp PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets Low Risk 3.0 1 day ago 1 day ago
pocketmine/pocketmine-mp PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey High Risk 7.5 3 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP: LogDoS by large complex unknown property logging in clientData in LoginPacket High Risk 7.5 6 months ago 1 month ago
pocketmine/pocketmine-mp PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket' Medium Risk 5.3 3 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time) High Risk 7.5 2 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash High Risk 7.5 3 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP BookEditPacket crash when inventory slot in the packet is invalid High Risk 7.5 2 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state Low Risk 3.7 6 months ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again) High Risk 7.5 3 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP vulnerable to server crash with certain invalid JSON payloads in `LoginPacket` due to vulnerable dependency High Risk 7.5 3 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP: JSON decoding of unlimited size large arrays/objects in ModalFormResponse Handling High Risk 8.0 6 months ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP: Network amplification vulnerability with `ActorEventPacket` Medium Risk 4.3 6 months ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP vulnerable to denial-of-service by sending large modal form responses Medium Risk 5.3 3 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket High Risk 7.5 3 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking High Risk 8.0 1 year ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP has LogDoS by many junk properties in client data JWT in LoginPacket Medium Risk 6.0 6 months ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP allows malicious client data to waste server resources due to lack of limits for explode() Medium Risk 5.3 1 year ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP invalid skin geometry JSON data leading to server crash High Risk 7.5 4 years ago 1 month ago
pocketmine/pocketmine-mp Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP Medium Risk 4.7 4 years ago 1 month ago
pocketmine/pocketmine-mp Unhandled exception when decoding form response JSON High Risk 7.5 4 years ago 1 month ago
pocketmine/pocketmine-mp Unchecked validity of Facing values in PlayerActionPacket High Risk 7.5 4 years ago 1 month ago
pocketmine/pocketmine-mp NaN/INF in serverbound movement packets can crash clients and servers High Risk 7.5 4 years ago 1 month ago
pocketmine/pocketmine-mp Denial-of-service vulnerability processing large chat messages containing many newlines Medium Risk 5.3 4 years ago 1 month ago
pocketmine/pocketmine-mp Uncapped length of skin data fields submitted by players High Risk 7.5 4 years ago 1 month ago
pocketmine/pocketmine-mp Exploitable inventory component chaining in PocketMine-MP High Risk 8.0 5 years ago 1 month ago
pocketmine/pocketmine-mp Book page text, count, and author/title length is not limited in PocketMine-MP Medium Risk 6.5 4 years ago 1 month ago
pocketmine/pocketmine-mp Insufficient type validation in pocketmine/pocketmine-mp High Risk 7.5 4 years ago 1 month ago
pocketmine/pocketmine-mp Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP High Risk 7.5 4 years ago 1 month ago
pocketmine/pocketmine-mp Inability to de-op players if listed in ops.txt with non-lowercase letters Low Risk 3.3 4 years ago 1 month ago
pocketmine/pocketmine-mp Improperly checked metadata on tools/armour itemstacks received from the client High Risk 7.5 4 years ago 1 month ago
pocketmine/pocketmine-mp PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash High Risk 7.5 3 years ago 9 months ago
Data courtesy of OSV.dev
Page 1