Skip to content
OpenAdvisories

Package · Maven

pro.gravit.launcher:launchserver-api

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8
    CVE-2026-54617 Scanner template

    GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler

    GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leading slash to the default LaunchServer file server on port 9274. FileServerHandler.ch…