CVE-2026-86201
1 advisory.
Packagist/pocketmine/pocketmine-mp CVE-2026-86201: high 7.5, EPSS 0.61%
PocketMine-MP: LogDoS by large complex unknown property logging in clientData in LoginPacket
Action: Upgrade pocketmine/pocketmine-mp to 5.41.1 or later.
composer require pocketmine/pocketmine-mp:5.41.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.41.1 | - |
Fixed versions
| 5.41.1 |
Sources
- osv: GHSA-h6rj-3m53-887h
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-h6rj-3m53-887h
- https://github.com/pmmp/PocketMine-MP/commit/87d1c0cea09d972fd4c2fafb84dac2ecab7649f0
- https://github.com/pmmp/PocketMine-MP
- https://github.com/pmmp/PocketMine-MP/blob/5.41.0/src/network/mcpe/handler/LoginPacketHandler.php#L288-L302
- https://github.com/pmmp/PocketMine-MP/blob/5.41.0/src/network/mcpe/handler/LoginPacketHandler.php#L333-L349
CVE-2026-86201 · published · modified · JSON