https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:33:54.723964+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365627 EUVD-2026-365627 2026-10-06T16:33:54.770312+00:00 EUVD-2026-365627 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86204 fkie_cve-2026-86204 2026-10-06T16:33:54.770347+00:00

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the server unresponsive.

 https://cve.radiocsirt.org/vuln/ghsa-323m-6rhr-p53j GHSA-323m-6rhr-p53j 2026-10-06T16:33:54.770379+00:00

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the server unresponsive.