Known vulnerabilities in PocketMine-MP

Vendor: PMMP
Software: PocketMine-MP
Software CPE: cpe:2.3:a:pocketmine:pocketmine-mp:*:*:*:*:*:*:*:*
Total vulnerabilities: 34
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PocketMine-MP PocketMine-MP is affected by 34 known vulnerabilities: 29 medium, 5 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132307 - Incomplete List of Disallowed Inputs
CWE-184 Medium
No
No
5.43.1 26.05.2026 SB2026052631
#VU132306 - Logging of Excessive Data
CWE-779 Medium
No
No
5.42.1 26.05.2026 SB2026052630
#VU125431 - Improper input validation
CWE-20 Low
No
No
5.39.2 08.04.2026 SB20260408168
#VU125430 - Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-367 Low
No
No
5.39.2 08.04.2026 SB20260408168
#VU125429 - Insufficient Control of Network Message Volume (Network Amplification)
CWE-406 Low
No
No
5.39.2 08.04.2026 SB20260408168
#VU125428 - Resource exhaustion
CWE-400 Medium
No
No
5.41.1 08.04.2026 SB20260408167
#VU125427 - Improper input validation
CWE-20 Medium
No
No
5.32.1 08.04.2026 SB20260408166
#VU105482 - Improper input validation
CWE-20 Medium
No
No
5.25.2 10.03.2025 SB2025031065
#VU125426 - Improper input validation
CWE-20 Medium
No
No
5.11.1 05.03.2024 SB2024030580
#VU125425 - Uncaught Exception
CWE-248 Medium
No
No
5.11.2 05.03.2024 SB2024030579
#VU125424 - Improper input validation
CWE-20 Medium
No
No
4.23.1, 5.3.1 13.09.2023 SB2023091373
#VU125423 - Improper input validation
CWE-20 Medium
No
No
4.23.1, 5.3.1 13.09.2023 SB2023091373
#VU125417 - Improper input validation
CWE-20 Medium
No
No
4.22.3, 5.2.1 14.07.2023 SB2023071436
#VU125415 - Improper input validation
CVE-2023-7332
CWE-20 Medium
No
No
4.18.1 30.05.2023 SB2023053077
#VU125416 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
4.18.0 30.05.2023 SB2023053079
#VU125414 - Improper input validation
CWE-20 Medium
No
No
4.20.5, 4.21.1 30.05.2023 SB2023053076
#VU125404 - Inefficient Algorithmic Complexity
CWE-407 Medium
No
No
4.12.5 09.01.2023 SB2023010613
#VU70771 - Improper input validation
CWE-20 Medium
No
No
4.12.5 06.01.2023 SB2023010613
#VU125406 - Improper input validation
CWE-20 Medium
No
No
4.8.1 06.01.2023 SB2023010648
#VU125405 - Resource exhaustion
CWE-400 Medium
No
No
4.12.3 30.12.2022 SB2022122901


Showing elements 1 - 20 out of 34