https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T03:15:48.784189+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-51013 CVE-2022-51013 — PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata 2026-10-23T03:15:48.798664+00:00

Affected: pmmp PocketMine-MP

PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range damage values in itemstack NBT to trigger unhandled exceptions in the Durable class, causing server crashes.