Packagist/pocketmine/raklib: medium 5.3
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory
Action: Upgrade pocketmine/raklib to 0.14.6 or later.
composer require pocketmine/raklib:0.14.6composer require pocketmine/raklib:0.15.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.14.0 | 0.14.6 | - |
| 0.15.0 | 0.15.1 | - |
Fixed versions
| 0.14.6 | 0.15.1 |
Sources
- osv: GHSA-w98g-5fmx-wm4x
- https://github.com/pmmp/RakLib/security/advisories/GHSA-w98g-5fmx-wm4x
- https://github.com/pmmp/RakLib/commit/371190f5854372154d1b263cd2a10e658e92bebe
- https://github.com/pmmp/RakLib
published · modified · JSON