{"action":"Upgrade pocketmine/pocketmine-mp to 5.44.2 or later.","affected":[{"fixed":"5.44.2","introduced":"0"}],"component":"pocketmine/pocketmine-mp","cve_ids":["CVE-2026-86198"],"ecosystem":"Packagist","epss":0.00382,"exploited":false,"fixed_versions":["5.44.2"],"ghsa_id":"GHSA-pg53-p7qp-65cv","id":"tcs_01M6495YHXR24C1VTJTAW44XH0","modified_at":"2026-10-29T16:45:05.772218679Z","published_at":"2026-10-29T16:32:58Z","references":["https://osv.dev/vulnerability/GHSA-pg53-p7qp-65cv","https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-pg53-p7qp-65cv","https://github.com/pmmp/PocketMine-MP/commit/7a27894146a04964ab628ed9033140fdbf887ff3","https://github.com/pmmp/PocketMine-MP","https://github.com/pmmp/PocketMine-MP/releases/tag/5.44.2"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-pg53-p7qp-65cv","url":"https://osv.dev/vulnerability/GHSA-pg53-p7qp-65cv"}],"summary":"PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets"}