GHSA-PG53-P7QP-65CV PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets

Summary During the resource pack stage of logging in, after the server sends ResourcePackStackPacket, a malicious client can send a batch of multiple ResourcePackClientResponsePacket packets with status ResourcePackClientResponsePacket::STATUSCOMPLETED causing the server to repeatedly execute...

PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets

Summary During the resource pack stage of logging in, after the server sends ResourcePackStackPacket, a malicious client can send a batch of multiple ResourcePackClientResponsePacket packets with status ResourcePackClientResponsePacket::STATUSCOMPLETED causing the server to repeatedly execute...

EUVD-2026-74909

PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUSCOMPLETED status during resource pack handling. Malicious clients can send batches of these packets to repeatedly trigger pre-spawn progression, creating duplicate Player...

CVE-2026-86198 PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket

PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUSCOMPLETED status during resource pack handling. Malicious clients can send batches of these packets to repeatedly trigger pre-spawn progression, creating duplicate Player...

PT-2026-89001

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to 5.44.2 Description Improper validation of multiple ResourcePackClientResponsePacket packets with STATUS COMPLETED status occurs during resource pack handling. This allows malicious clients to send batches of the...