Skip to content
OpenAdvisories

Package · NuGet

TShock

2 known vulnerabilities.

2 results · Feed

  • Medium —

    TShock allows chat while not fully connected, possible ban evasion

    This issue was reported to TShock by @ohayo, but was found by the Discord user by the name of `sofurry.com`. Please note that this user **does not own this domain on the internet, just the discord handle**. TShock overrides certain Terraria vanilla systems, i…

  • High —

    TShock Security Escalation Exploit

    ### Impact An issue with the way OTAPI manages client connections results in stale UUIDs remaining on `RemoteClient` instances after a player disconnects. Because of this, if the following conditions are met a player may assume the login state of a previously…