Alvin0319

The software fails to limit unauthenticated sessions, which allows attackers to exhaust available player slots. This occurs when sessions are created without sending a `LoginPacket`, enabling a flood of unauthenticated connections that occupy the maximum player capacity and prevent legitimate players from joining the server.

A denial of service issue exists in the JSON parsing of the `LoginPacket` due to improper handling of null values within arrays. The json mapper accepts null type values in typed arrays, which the software does not expect. An attacker can send malformed JSON containing unexpected null elements in the `LoginPacket` to crash the server.