https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T13:13:44.762010+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-39177 CVE-2021-39177 — User impersonation due to incorrect handling of the login JWT 2026-10-17T13:13:44.763401+00:00

Affected: GeyserMC Geyser

Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Versions of Geyser prior to 1.4.2-SNAPSHOT allow anyone that can connect to the server to forge a LoginPacket with manipulated JWT token allowing impersonation as any user. Version 1.4.2-SNAPSHOT contains a patch for the issue. There are no known workarounds aside from upgrading.