{"action":"Upgrade pocketmine/pocketmine-mp to 5.32.1 or later.","affected":[{"fixed":"5.32.1","introduced":"0"}],"component":"pocketmine/pocketmine-mp","cve_ids":["CVE-2025-71417"],"ecosystem":"Packagist","epss":0.00436,"exploited":false,"fixed_versions":["5.32.1"],"ghsa_id":"GHSA-fqqv-56h5-f57g","id":"tcs_01M5KF2039F8R58WJ1P5361XGT","modified_at":"2026-09-10T03:56:07.463863435Z","published_at":"2025-09-02T16:52:51Z","references":["https://osv.dev/vulnerability/GHSA-fqqv-56h5-f57g","https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-fqqv-56h5-f57g","https://github.com/pmmp/PocketMine-MP/commit/c417ecd30d20520227b15e09eda87db492ab0a6a","https://github.com/pmmp/PocketMine-MP/commit/e375437439df51f7862b6b98318394643fcd6724","https://github.com/pmmp/PocketMine-MP","https://github.com/pmmp/PocketMine-MP/releases/tag/5.32.1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-fqqv-56h5-f57g","url":"https://osv.dev/vulnerability/GHSA-fqqv-56h5-f57g"},{"source":"nvd","source_id":"CVE-2025-71417","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71417"}],"summary":"PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking"}