Packagist/pocketmine/pocketmine-mp CVE-2026-86198: low

PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets

Action: Upgrade pocketmine/pocketmine-mp to 5.44.2 or later.

composer require pocketmine/pocketmine-mp:5.44.2

Affected

Fixed versions

Sources

• osv: GHSA-pg53-p7qp-65cv
• https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-pg53-p7qp-65cv
• https://github.com/pmmp/PocketMine-MP/commit/7a27894146a04964ab628ed9033140fdbf887ff3
• https://github.com/pmmp/PocketMine-MP
• https://github.com/pmmp/PocketMine-MP/releases/tag/5.44.2

CVE-2026-86198 · published 2026-10-29T16:32:58Z · modified 2026-10-29T16:45:05.772218679Z · JSON