CVE-2025-71417
1 advisory.
Packagist/pocketmine/pocketmine-mp CVE-2025-71417: high, EPSS 0.31%
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
Action: Upgrade pocketmine/pocketmine-mp to 5.32.1 or later.
composer require pocketmine/pocketmine-mp:5.32.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.32.1 | - |
Fixed versions
| 5.32.1 |
Sources
- osv: GHSA-fqqv-56h5-f57g
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-fqqv-56h5-f57g
- https://github.com/pmmp/PocketMine-MP/commit/c417ecd30d20520227b15e09eda87db492ab0a6a
- https://github.com/pmmp/PocketMine-MP/commit/e375437439df51f7862b6b98318394643fcd6724
- https://github.com/pmmp/PocketMine-MP
- https://github.com/pmmp/PocketMine-MP/releases/tag/5.32.1
CVE-2025-71417 · published · modified · JSON