CVE-2023-54394
1 advisory.
Packagist/pocketmine/pocketmine-mp CVE-2023-54394: medium 5.3, EPSS 0.38%
PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket'
Action: Upgrade pocketmine/pocketmine-mp to 4.18.0-ALPHA2 or later.
composer require pocketmine/pocketmine-mp:4.18.0-ALPHA2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.18.0-ALPHA2 | - |
Fixed versions
| 4.18.0-ALPHA2 |
Sources
- osv: GHSA-42qm-8v8m-m78c
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-42qm-8v8m-m78c
- https://github.com/pmmp/PocketMine-MP
- https://github.com/pmmp/PocketMine-MP/blob/4.18.0-ALPHA2/changelogs/4.18-alpha.md#4180-ALPHA2
CVE-2023-54394 · published · modified · JSON