Skip to content
OpenAdvisories

Vendor

pmmp

33 known vulnerabilities.

Products

PocketMine-MP 33
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-86203

    PocketMine-MP before 5.39.2 Item Duplication via Despawn State

    PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and …

    pmmp PocketMine-MP pocketmine/pocketmine-mp Packagist
  • Low 3.3
    CVE-2021-48006

    PocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivity

    PocketMine-MP before 4.0.3 does not perform case-insensitive matching when removing operator entries from ops.txt. The removeOp function lowercases the supplied name but only removes an exactly matching entry, so an operator name stored with non-lowercase let…

    pmmp PocketMine-MP pocketmine/pocketmine-mp Packagist