Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.3% on packagist.org
Top 4.9% downloads on packagist.org
Top 0.7% dependent packages on packagist.org
Top 0.9% dependent repos on packagist.org
Top 0.1% forks on packagist.org

packagist.org : pocketmine/pocketmine-mp

A server software for Minecraft: Bedrock Edition written in PHP

Registry - Source - Homepage - JSON
purl: pkg:composer/pocketmine/pocketmine-mp
Keywords: minecraft, minecraft-server, phpstan-l9, phpstan-strict, pmmp, pocketmine, pocketmine-mp
License: LGPL-3.0
Latest release: 19 days ago
First release: almost 6 years ago
Namespace: pocketmine
Dependent packages: 59
Dependent repositories: 120
Downloads: 54,034 total
Stars: 3,188 on GitHub
Forks: 1,493 on GitHub
Total Commits: 14058
Committers: 229
Average commits per author: 61.389
Development Distribution Score (DDS): 0.535
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Funding links: https://github.com/pmmp/PocketMine-MP#donate, https://www.patreon.com/pocketminemp, https://patreon.com/pocketminemp
Last synced: 10 days ago

High
GSA_kwCzR0hTQS13amZxLTg4cTItcjM0as0log
Unhandled exception when decoding form response JSON
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 2 years ago
High
GSA_kwCzR0hTQS1jNmZnLTk5cHItMjVtOc0g_g
Uncapped length of skin data fields submitted by players
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 2 years ago
Low
GSA_kwCzR0hTQS1qNXFnLXc5amctM3dnM80cpA
Inability to de-op players if listed in ops.txt with non-lowercase letters
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 2 years ago
High
GSA_kwCzR0hTQS03d3J2LTZoNDItdzU0Zs4AA0t5
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: 10 months ago
High
GSA_kwCzR0hTQS1oNmozLWozNWYtdjJ4N84AA5zM
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: 2 months ago
High
GSA_kwCzR0hTQS13cXF2LWpjZnItOWY1Z84AAw0x
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS03bTlyLXJxOWotd21taM4AAw1h
PocketMine-MP vulnerable to denial-of-service by sending large modal form responses
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 1 year ago
High
GSA_kwCzR0hTQS00NmM1LXBmajgtZnY2Nc00Jw
Improperly checked metadata on tools/armour itemstacks received from the client
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1oNzl4LTk4cjItZzZxY80loQ
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 2 years ago
High
GSA_kwCzR0hTQS14aDk5LWh3N2gtd2Y2M80iuQ
Unchecked validity of Facing values in PlayerActionPacket
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 2 years ago
High
GSA_kwCzR0hTQS05MmpoLWd3Y2gtanEzOM4AA13q
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: 8 months ago
High
GSA_kwCzR0hTQS1oODdyLWY0dmMtbWNods4AAzpK
PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: 11 months ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThqcTYtdzVjZy13bTQ1
Exploitable inventory component chaining in PocketMine-MP
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 3 years ago
High
GSA_kwCzR0hTQS1wcXAzLThycnctZzh2bc4AAzpJ
PocketMine-MP vulnerable to server crash with certain invalid JSON payloads in `LoginPacket` due to vulnerable dependency
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: 11 months ago
Moderate
GSA_kwCzR0hTQS00MnFtLTh2OG0tbTc4Y84AAzlJ
PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket'
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: 12 months ago
High
GSA_kwCzR0hTQS04Y3dxLTRjbWYtcHg3M84AAuFv
PocketMine-MP invalid skin geometry JSON data leading to server crash
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 1 year ago
High
GSA_kwCzR0hTQS03OXJjLWpqaDYtcmM4Oc4AA13p
PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: 8 months ago
High
GSA_kwCzR0hTQS1mbTM1LWpnZzMtM2dyeM00Gg
NaN/INF in serverbound movement packets can crash clients and servers
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1wNjJqLWhyeG0teGN4Zs0g_Q
Book page text, count, and author/title length is not limited in PocketMine-MP
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: over 2 years ago
High
GSA_kwCzR0hTQS14YzdqLXdqMzYtcWpmcs4AA5zL
PocketMine-MP BookEditPacket crash when inventory slot in the packet is invalid
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: 2 months ago
High
GSA_kwCzR0hTQS1mcXgzLXI3NWgtdmM4Oc4AArad
Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1najk0LXY0cDktdzY3Ms4AArNE
Denial-of-service vulnerability processing large chat messages containing many newlines
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1nNXJyLXA2OWgtN3YzZ80_qQ
Insufficient type validation in pocketmine/pocketmine-mp
Ecosystems: packagist
Packages: pocketmine/pocketmine-mp
Source: github
Published: about 2 years ago