Packagist/pocketmine/pocketmine-mp CVE-2023-54355: high 7.5, EPSS 0.22%

PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey

Action: Upgrade pocketmine/pocketmine-mp to 5.3.1 or later.

composer require pocketmine/pocketmine-mp:5.3.1

Affected

Fixed versions

Sources

• osv: GHSA-79rc-jjh6-rc89
• https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-79rc-jjh6-rc89
• https://github.com/pmmp/PocketMine-MP/commit/4e646d19a4a1e0d082bd4d1f5a58ae0182a268d9
• https://github.com/pmmp/PocketMine-MP

CVE-2023-54355 · published 2023-09-14T17:10:01Z · modified 2026-09-10T03:56:12.031703975Z · JSON