https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T14:26:55.735134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-379498 EUVD-2026-379498 2026-10-05T14:26:55.781916+00:00 EUVD-2026-379498 https://cve.radiocsirt.org/vuln/fkie_cve-2023-54355 fkie_cve-2023-54355 2026-10-05T14:26:55.781952+00:00

PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provide LoginPackets with keys using different curves or non-EC key types to pass login verification but trigger an uncaught exception during ECDH key derivation, crashing the server.

 https://cve.radiocsirt.org/vuln/ghsa-7j9c-9c4f-5ff9 GHSA-7j9c-9c4f-5ff9 2026-10-05T14:26:55.781987+00:00

PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provide LoginPackets with keys using different curves or non-EC key types to pass login verification but trigger an uncaught exception during ECDH key derivation, crashing the server.