CVEs we hold for Pmmp

Records whose assigning authority named Pmmp as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-86204PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacketpmmp PocketMine-MP

CVE-2026-86203PocketMine-MP before 5.39.2 Item Duplication via Despawn Statepmmp PocketMine-MP

CVE-2026-86202PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacketpmmp PocketMine-MP

CVE-2026-86201PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientDatapmmp PocketMine-MP

CVE-2026-86200PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWTpmmp PocketMine-MP

CVE-2026-86199PocketMine-MP before 5.43.1 Denial of Service via unauthenticated loginpmmp PocketMine-MP

CVE-2026-86198PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacketpmmp PocketMine-MP

CVE-2025-71418PocketMine-MP before 5.25.2 Denial of Service via explodepmmp PocketMine-MP

CVE-2025-71417PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacketpmmp PocketMine-MP

CVE-2024-58381PocketMine-MP before 5.11.1 Denial of Service via LoginPacketpmmp PocketMine-MP

CVE-2024-58380PocketMine-MP before 5.11.2 Denial of Service via BookEditPacketpmmp PocketMine-MP

CVE-2023-7332PocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server Crashpmmp PocketMine-MP

CVE-2023-54396PocketMine-MP before 4.8.1 Server Crash via Banner NBTpmmp PocketMine-MP

CVE-2023-54395PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacketpmmp PocketMine-MP

CVE-2023-54394PocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacketpmmp PocketMine-MP

CVE-2023-54393PocketMine-MP before 4.20.5 Denial of Service via LoginPacketpmmp PocketMine-MP

CVE-2023-54392PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacketpmmp PocketMine-MP

CVE-2023-54390PocketMine-MP before 5.3.1 Denial of Service via LoginPacketpmmp PocketMine-MP

CVE-2023-54355PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curvepmmp PocketMine-MP

CVE-2022-51018PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pagespmmp PocketMine-MP

CVE-2022-51017PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Datapmmp PocketMine-MP

CVE-2022-51016PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replaypmmp PocketMine-MP

CVE-2022-51015PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacketpmmp PocketMine-MP

CVE-2022-51014PocketMine-MP before 4.0.7 Denial of Service via JSON Decodingpmmp PocketMine-MP

CVE-2022-51013PocketMine-MP before 4.2.3 Denial of Service via NBT Metadatapmmp PocketMine-MP

CVE-2022-51012PocketMine-MP before 4.2.9 Denial of Service via NBT Deserializationpmmp PocketMine-MP

CVE-2022-51011PocketMine-MP before 4.2.10 Denial of Service via Chat Messagespmmp PocketMine-MP

CVE-2022-51010PocketMine-MP before 4.4.2 Server Crash via Item IDpmmp PocketMine-MP

CVE-2022-51009PocketMine-MP before 4.7.2 Denial of Service via Skin Geometrypmmp PocketMine-MP

CVE-2022-51008PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessionspmmp PocketMine-MP

CVE-2021-48007PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacketpmmp PocketMine-MP

CVE-2021-48006PocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivitypmmp PocketMine-MP

CVE-2020-37277PocketMine-MP before 3.15.4 Denial of Service via InventoryTransactionpmmp PocketMine-MP

33 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.