CVE-2026-86204
1 advisory.
Packagist/pocketmine/pocketmine-mp CVE-2026-86204: high
PocketMine-MP: JSON decoding of unlimited size large arrays/objects in ModalFormResponse Handling
Action: Upgrade pocketmine/pocketmine-mp to 5.39.2 or later.
composer require pocketmine/pocketmine-mp:5.39.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.39.2 | - |
Fixed versions
| 5.39.2 |
Sources
- osv: GHSA-788v-5pfp-93ff
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-788v-5pfp-93ff
- https://github.com/pmmp/PocketMine-MP/commit/cef1088341e40ee7a6fa079bca47a84f3524d877
- https://github.com/pmmp/PocketMine-MP/commit/f983f4f66d5e72d7a07109c8175799ab0ee771d5
- https://github.com/pmmp/PocketMine-MP
CVE-2026-86204 · published · modified · JSON