VYPR

universal-modder

by Rehan Remade

CVEs (1)

  • CVE-2026-125358HigNov 10, 2026
    risk 0.46cvss 8.1epss —

    Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation vulnerability in the HostLink class of its passthrough example mods that allows remote attackers to execute Minecraft commands. Any web page open in the…