{"action":"Upgrade pocketmine/pocketmine-mp to 3.26.5 or later.","affected":[{"fixed":"3.26.5","introduced":"0"},{"fixed":"4.0.5","introduced":"4.0.0"}],"component":"pocketmine/pocketmine-mp","cve_ids":["CVE-2022-51017"],"ecosystem":"Packagist","epss":0.00473,"exploited":false,"fixed_versions":["3.26.5","4.0.5"],"ghsa_id":"GHSA-c6fg-99pr-25m9","id":"tcs_01M5KF0NW8CB6N67JC0CSHTJJ0","modified_at":"2026-09-08T12:38:09.051433731Z","published_at":"2022-01-06T23:53:58Z","references":["https://osv.dev/vulnerability/GHSA-c6fg-99pr-25m9","https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-c6fg-99pr-25m9","https://github.com/pmmp/PocketMine-MP/commit/6492cac5c10f9fa8443ceddd2191a7b65b73f601","https://github.com/pmmp/PocketMine-MP/commit/958a9dbf0fe3131ab60319c5a939f5dfbfe5dfbb","https://github.com/pmmp/PocketMine-MP"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c6fg-99pr-25m9","url":"https://osv.dev/vulnerability/GHSA-c6fg-99pr-25m9"}],"summary":"Uncapped length of skin data fields submitted by players"}