High severity7.5NVD Advisory· Published Sep 9, 2026
CVE-2024-58381
CVE-2024-58381
Description
PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties, causing the application to crash.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <5.11.1
Patches
Vulnerability mechanics
References
4- github.com/pmmp/PocketMine-MP/commit/6872661fd03649cc7a8762c41c16e9ee5a4de1c9nvd
- github.com/pmmp/PocketMine-MP/commit/b96a209f9e8b76b899a0d0918493cd87eb3c02a7nvd
- github.com/pmmp/PocketMine-MP/security/advisories/GHSA-h6j3-j35f-v2x7nvd
- www.vulncheck.com/advisories/pocketmine-mp-before-5.11.1-denial-of-service-via-loginpacketnvd
News mentions
0No linked articles in our index yet.