{"action":"Upgrade pocketmine/pocketmine-mp to 5.39.2 or later.","affected":[{"fixed":"5.39.2","introduced":"0"}],"component":"pocketmine/pocketmine-mp","cve_ids":["CVE-2026-86202"],"ecosystem":"Packagist","epss":0.00354,"exploited":false,"fixed_versions":["5.39.2"],"ghsa_id":"GHSA-7hmv-4j2j-pp6f","id":"tcs_01M5KEY4NRV1KKCMSAZN25P12Y","modified_at":"2026-09-10T03:56:07.337053710Z","published_at":"2026-04-06T22:54:10Z","references":["https://osv.dev/vulnerability/GHSA-7hmv-4j2j-pp6f","https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-7hmv-4j2j-pp6f","https://github.com/pmmp/PocketMine-MP/commit/aeea1150a772a005b92bd418366f1b7cf1a91ab5","https://github.com/pmmp/PocketMine-MP"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-7hmv-4j2j-pp6f","url":"https://osv.dev/vulnerability/GHSA-7hmv-4j2j-pp6f"}],"summary":"PocketMine-MP: Network amplification vulnerability with `ActorEventPacket`"}