Product by Pmmp

    PocketMine-MP

    33 known vulnerabilities in PocketMine-MP (Pmmp), 0 of them actively exploited (CISA KEV).

    Key figures

    33

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in PocketMine-MP (Pmmp)
    HighCVE-2024-58381

    PocketMine-MP before 5.11.1 Denial of Service via LoginPacket

    7.5
    HighCVE-2023-54393

    PocketMine-MP before 4.20.5 Denial of Service via LoginPacket

    7.5
    HighCVE-2022-51017

    PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data

    7.5
    HighCVE-2023-54390

    PocketMine-MP before 5.3.1 Denial of Service via LoginPacket

    7.5
    HighCVE-2026-86201

    PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData

    7.5
    HighCVE-2022-51009

    PocketMine-MP before 4.7.2 Denial of Service via Skin Geometry

    7.5
    HighCVE-2022-51015

    PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket

    6.5
    HighCVE-2026-86199

    PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login

    7.5
    MediumCVE-2026-86200

    PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT

    5.3
    HighCVE-2023-54355

    PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve

    7.5
    HighCVE-2023-54396

    PocketMine-MP before 4.8.1 Server Crash via Banner NBT

    6.5
    HighCVE-2023-54392

    PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket

    6.5
    HighCVE-2024-58380

    PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket

    6.5
    HighCVE-2022-51012

    PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization

    6.5
    HighCVE-2022-51013

    PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata

    6.5
    MediumCVE-2025-71418

    PocketMine-MP before 5.25.2 Denial of Service via explode

    5.3
    HighCVE-2022-51014

    PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding

    6.5
    HighCVE-2022-51010

    PocketMine-MP before 4.4.2 Server Crash via Item ID

    6.5
    HighCVE-2020-37277

    PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction

    6.5
    HighCVE-2021-48007

    PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket

    6.5
    MediumCVE-2022-51008

    PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions

    5.3
    HighCVE-2026-86204

    PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket

    6.5
    HighCVE-2025-71417

    PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket

    6.5
    HighCVE-2022-51018

    PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages

    6.5
    MediumCVE-2023-54394

    PocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket

    4.3

    All vulnerabilities in search

    All products by Pmmp