GHSA-8JQ6-W5CG-WM45 Exploitable inventory component chaining in PocketMine-MP

Impact Specially crafted InventoryTransactionPackets sent by malicious clients were able to exploit the behaviour of InventoryTransaction-findResultItem and cause it to take an abnormally long time to execute causing an apparent server freeze. The affected code is intended to compact conflicting...

PT-2020-21166

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to 3.15.4 Description The issue arises from specially crafted InventoryTransactionPackets sent by malicious clients, exploiting the behavior of InventoryTransaction-findResultItem and causing it to take an abnormal...