Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Arkadiaeu

#34450of 60,594
8.7Total CVSS
Vulnerabilities · 1
PT-2026-89004
2026-04-06
8.7
CVE-2026-86201
Pmmp
Pocketmine-Mp
A denial of service issue exists in the processing of the `LoginPacket` where large or complex structures within unknown `clientData` JWT properties cause excessive logging without sanitization. Attackers can send crafted `LoginPacket` messages containing deeply nested or massive object structures to trigger out-of-memory conditions, waste CPU time during serialization, or spam the console, potentially crashing the server. This occurs because the `JsonMapper` instance used to process the JWT body is configured to warn on unexpected properties instead of rejecting them, and the `warnUndefinedJsonPropertyHandler` function attempts to export the malicious object without length limitations.