https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T14:10:15.606181+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2025-71418 fkie_cve-2025-71418 2026-10-05T14:10:16.128805+00:00

PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packets with excessive delimiters to consume CPU and memory through sign editing, JWT parsing, and command parsing endpoints.

 https://vulnerability.circl.lu/vuln/ghsa-3rp9-crcm-7w78 GHSA-3rp9-crcm-7w78 2026-10-05T14:10:16.128928+00:00

PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packets with excessive delimiters to consume CPU and memory through sign editing, JWT parsing, and command parsing endpoints.