{"action":"Upgrade pocketmine/pocketmine-mp to 5.39.2 or later.","affected":[{"fixed":"5.39.2","introduced":"0"}],"component":"pocketmine/pocketmine-mp","cve_ids":["CVE-2026-86203"],"ecosystem":"Packagist","epss":0.00348,"exploited":false,"fixed_versions":["5.39.2"],"ghsa_id":"GHSA-f9jp-856v-8642","id":"tcs_01M5KF1NGBVKHFQV1DDGWE1897","modified_at":"2026-09-10T03:56:10.282861511Z","published_at":"2026-04-06T22:54:14Z","references":["https://osv.dev/vulnerability/GHSA-f9jp-856v-8642","https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-f9jp-856v-8642","https://github.com/pmmp/PocketMine-MP/commit/c0719b76b18f2508143134e79bc9f1aa39109683","https://github.com/pmmp/PocketMine-MP"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-f9jp-856v-8642","url":"https://osv.dev/vulnerability/GHSA-f9jp-856v-8642"}],"summary":"PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state"}