https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T15:57:46.799115+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-51017 CVE-2022-51017 — PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data 2026-09-30T15:57:46.816099+00:00

Affected: pmmp PocketMine-MP

PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG_String limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT data serialization, causing server crashes.