CVE-2026-82230

Uncontrolled recursion in the mcpack2pb component in Apache bRPC version 1.18.0 on all platforms allows remote attackers to make the server crash via sending deeply nested mcpack data. Root Cause: The bRPC mcpack2pb parser used to serve nsheadmcpack / ubrpc / publicpbrpc requests recursively pars...