CVE-2023-54393 — PocketMine-MP before 4.20.5 Denial of Service via LoginPacket
PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can…
Published: 2026-09-09 · CVSS: 8.7 · CVSS 4.0
PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7