CVE-2022-51017
1 advisory.
Packagist/pocketmine/pocketmine-mp CVE-2022-51017: high 7.5
Uncapped length of skin data fields submitted by players
Action: Upgrade pocketmine/pocketmine-mp to 3.26.5 or later.
composer require pocketmine/pocketmine-mp:3.26.5composer require pocketmine/pocketmine-mp:4.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.26.5 | - |
| 4.0.0 | 4.0.5 | - |
Fixed versions
| 3.26.5 | 4.0.5 |
Sources
- osv: GHSA-c6fg-99pr-25m9
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-c6fg-99pr-25m9
- https://github.com/pmmp/PocketMine-MP/commit/6492cac5c10f9fa8443ceddd2191a7b65b73f601
- https://github.com/pmmp/PocketMine-MP/commit/958a9dbf0fe3131ab60319c5a939f5dfbfe5dfbb
- https://github.com/pmmp/PocketMine-MP
CVE-2022-51017 · published · modified · JSON