{"action":"Upgrade pocketmine/raklib to 0.14.6 or later.","affected":[{"fixed":"0.14.6","introduced":"0.14.0"},{"fixed":"0.15.1","introduced":"0.15.0"}],"component":"pocketmine/raklib","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["0.14.6","0.15.1"],"ghsa_id":"GHSA-w98g-5fmx-wm4x","id":"tcs_01M5KF9YFMQPG4VJ55GD93XRMW","modified_at":"2024-11-28T05:40:45.141386Z","published_at":"2023-11-15T18:42:38Z","references":["https://osv.dev/vulnerability/GHSA-w98g-5fmx-wm4x","https://github.com/pmmp/RakLib/security/advisories/GHSA-w98g-5fmx-wm4x","https://github.com/pmmp/RakLib/commit/371190f5854372154d1b263cd2a10e658e92bebe","https://github.com/pmmp/RakLib"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w98g-5fmx-wm4x","url":"https://osv.dev/vulnerability/GHSA-w98g-5fmx-wm4x"}],"summary":"pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory"}