Packagist pocketmine/pocketmine-mp

Name: Packagist pocketmine/pocketmine-mp
Brand: Packagist

productUS

pkg:composer/pocketmine/pocketmine-mp

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical7high20medium2low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-58381US	high7.5	0.78% (56th)	—	5.11.1	2026-09-09	< 5.11.1
CVE-2022-51015US	medium6.5	0.70% (53rd)	—	4.0.6	2026-09-07	< 4.0.6
CVE-2026-86200US	medium5.3	0.64% (50th)	—	5.42.1	2026-09-09	< 5.42.1
CVE-2023-54393US	high7.5	0.63% (50th)	—	4.21.1	2026-09-09	2 versions
CVE-2022-51017US	high7.5	0.63% (50th)	—	3.26.5	2026-09-07	2 versions
CVE-2026-86201US	high7.5	0.61% (49th)	—	5.41.1	2026-09-09	< 5.41.1
CVE-2023-54390US	high7.5	0.61% (49th)	—	5.3.1	2026-09-09	2 versions
CVE-2022-51009US	high7.5	0.61% (49th)	—	4.7.2	2026-09-06	< 4.7.2
CVE-2025-71418US	medium5.3	0.55% (46th)	—	5.25.2	2026-09-09	< 5.25.2
CVE-2023-54394US	medium4.3	0.53% (45th)	—	4.18.0-ALPHA2	2026-09-09	< 4.18.0-ALPHA2
CVE-2024-58380US	medium6.5	0.53% (45th)	—	5.11.2	2026-09-09	< 5.11.2
CVE-2023-54396US	medium6.5	0.53% (45th)	—	4.8.1	2026-09-09	< 4.8.1
CVE-2023-54392US	medium6.5	0.53% (45th)	—	4.22.3	2026-09-09	2 versions
CVE-2022-51014US	medium6.5	0.53% (45th)	—	4.0.7	2026-09-07	4.0.0 → 4.0.7
CVE-2022-51013US	medium6.5	0.53% (45th)	—	4.2.4	2026-09-07	< 4.2.4
CVE-2022-51012US	medium6.5	0.53% (45th)	—	4.2.9	2026-09-07	< 4.2.9
CVE-2022-51010US	medium6.5	0.53% (45th)	—	4.4.2	2026-09-07	4.0.0-BETA5 → 4.4.2
CVE-2021-48007US	medium6.5	0.53% (45th)	—	3.18.1	2026-09-06	< 3.18.1
CVE-2020-37277US	medium6.5	0.53% (45th)	—	3.15.4	2026-09-06	< 3.15.4
CVE-2023-54395US	medium4.3	0.45% (39th)	—	4.12.5	2026-09-09	< 4.12.5
CVE-2022-51011US	medium4.3	0.45% (39th)	—	4.2.10	2026-09-07	< 4.2.10
CVE-2026-86204US	medium6.5	0.44% (38th)	—	5.39.2	2026-09-09	< 5.39.2
CVE-2025-71417US	medium6.5	0.44% (38th)	—	5.32.1	2026-09-09	< 5.32.1
CVE-2022-51018US	medium6.5	0.44% (38th)	—	4.0.5	2026-09-07	2 versions
CVE-2023-7332US	—	0.40% (34th)	—	4.18.1	2025-12-31	< 4.18.1
CVE-2023-54355US	high7.5	0.38% (32nd)	—	5.3.1	2026-09-09	5.2.0 → 5.3.1
CVE-2026-86202US	medium4.3	0.35% (29th)	—	5.39.2	2026-09-09	< 5.39.2
CVE-2026-86203US	low3.7	0.35% (28th)	—	5.39.2	2026-09-09	< 5.39.2
CVE-2022-51016US	medium6.1OT elevated	0.24% (15th)	—	4.0.0	2026-09-07	3.0.0 → 4.0.0
CVE-2021-48006US	low3.3	0.15% (5th)	—	4.0.3	2026-09-06	< 4.0.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation11 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-248Uncaught Exception2 CVEs
CWE-1025Comparison Using Wrong Factors1 CVEs
CWE-1284Improper Validation of Specified Quantity in Input1 CVEs
CWE-1287Improper Validation of Specified Type of Input1 CVEs
CWE-129Improper Validation of Array Index1 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan