Packagist/pocketmine/pocketmine-mp CVE-2021-48006: low 3.3, EPSS 0.11%
Inability to de-op players if listed in ops.txt with non-lowercase letters
Action: Upgrade pocketmine/pocketmine-mp to 4.0.3 or later.
composer require pocketmine/pocketmine-mp:4.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.3 | - |
Fixed versions
| 4.0.3 |
Sources
- osv: GHSA-j5qg-w9jg-3wg3
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-j5qg-w9jg-3wg3
- https://github.com/iTXTech/Genisys/issues/1188
- https://github.com/pmmp/PocketMine-MP/commit/4d37b79ff7f9d9452e988387f97919a9a1c4954e
- https://github.com/pmmp/PocketMine-MP
- https://github.com/pmmp/PocketMine-MP/blob/4.0.3/changelogs/4.0.md#403
CVE-2021-48006 · published · modified · JSON