Product by Pmmp
PocketMine-MP
33 known vulnerabilities in PocketMine-MP (Pmmp), 0 of them actively exploited (CISA KEV).
Key figures
33
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-58381 | PocketMine-MP before 5.11.1 Denial of Service via LoginPacket | 7.5 | |
| High | CVE-2023-54393 | PocketMine-MP before 4.20.5 Denial of Service via LoginPacket | 7.5 | |
| High | CVE-2022-51017 | PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data | 7.5 | |
| High | CVE-2023-54390 | PocketMine-MP before 5.3.1 Denial of Service via LoginPacket | 7.5 | |
| High | CVE-2026-86201 | PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData | 7.5 | |
| High | CVE-2022-51009 | PocketMine-MP before 4.7.2 Denial of Service via Skin Geometry | 7.5 | |
| High | CVE-2022-51015 | PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket | 6.5 | |
| High | CVE-2026-86199 | PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login | 7.5 | |
| Medium | CVE-2026-86200 | PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT | 5.3 | |
| High | CVE-2023-54355 | PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve | 7.5 | |
| High | CVE-2023-54396 | PocketMine-MP before 4.8.1 Server Crash via Banner NBT | 6.5 | |
| High | CVE-2023-54392 | PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket | 6.5 | |
| High | CVE-2024-58380 | PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket | 6.5 | |
| High | CVE-2022-51012 | PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization | 6.5 | |
| High | CVE-2022-51013 | PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata | 6.5 | |
| Medium | CVE-2025-71418 | PocketMine-MP before 5.25.2 Denial of Service via explode | 5.3 | |
| High | CVE-2022-51014 | PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding | 6.5 | |
| High | CVE-2022-51010 | PocketMine-MP before 4.4.2 Server Crash via Item ID | 6.5 | |
| High | CVE-2020-37277 | PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction | 6.5 | |
| High | CVE-2021-48007 | PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket | 6.5 | |
| Medium | CVE-2022-51008 | PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions | 5.3 | |
| High | CVE-2026-86204 | PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket | 6.5 | |
| High | CVE-2025-71417 | PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket | 6.5 | |
| High | CVE-2022-51018 | PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages | 6.5 | |
| Medium | CVE-2023-54394 | PocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket | 4.3 |