Skip to content
OpenAdvisories

Product · rehan-remade

universal-modder

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-125358

    Universal-modder before e88f687 Cross-Site WebSocket Command Execution via HostLink

    Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation vulnerability in the HostLink class of its passthrough example mods that allows remote attackers to execute Minecraft commands. Any web page…

    rehan-remade universal-modder