PT-2026-86775

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to 4.2.3 Description The software fails to validate damage metadata values in tool and armor item NBT Named Binary Tag data received from clients. Due to a workaround applied in version 1.13, the TypeConverter uses...