https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:28:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-337718 EUVD-2026-337718 https://cve.radiocsirt.org/vuln/euvd-2026-337718 https://cve.radiocsirt.org/vuln/fkie_cve-2023-7332 <p>PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling. A remote attacker with a valid player session can request that the server drop more items than are available in the player&#39;s hotbar, triggering a server crash and resulting in denial of service.</p> <p>PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling. A remote attacker with a valid player session can request that the server drop more items than are available in the player&#39;s hotbar, triggering a server crash and resulting in denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-7332 https://cve.radiocsirt.org/vuln/ghsa-h87r-f4vc-mchv <p><strong>Affected:</strong> Packagist: pocketmine/pocketmine-mp</p> <p>### Impact In 4.18.0, the network handling of inventories was completely revamped. Due to this, a bug was introduced which allowed players to request that the server drop more of an item than they had available in their hotbar.</p> <p>This did not lead to any duplication issues, but instead led to a server crash, and is believed to have been exploited in the wild.</p> <p>### Patches This was fixed in 58974765a68f63a9968a7ff3a06f584ff2ee08d2, which was released in 4.18.1.</p> <p>### Workarounds Handle `InventoryTransactionPacket` in `DataPacketReceiveEvent`, and verify that the item count dropped isn&#39;t more than the available item count. However, it&#39;s complicated to do this, so it&#39;s not recommended.</p> <p><strong>Affected:</strong> Packagist: pocketmine/pocketmine-mp</p> <p>### Impact In 4.18.0, the network handling of inventories was completely revamped. Due to this, a bug was introduced which allowed players to request that the server drop more of an item than they had available in their hotbar.</p> <p>This did not lead to any duplication issues, but instead led to a server crash, and is believed to have been exploited in the wild.</p> <p>### Patches This was fixed in 58974765a68f63a9968a7ff3a06f584ff2ee08d2, which was released in 4.18.1.</p> <p>### Workarounds Handle `InventoryTransactionPacket` in `DataPacketReceiveEvent`, and verify that the item count dropped isn&#39;t more than the available item count. However, it&#39;s complicated to do this, so it&#39;s not recommended.</p> https://cve.radiocsirt.org/vuln/ghsa-h87r-f4vc-mchv