What is GHSA-j79r-9x96-ppx6?

GHSA-j79r-9x96-ppx6 is a security advisory published by GitHub Security Advisories with High severity. PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in...

Which CVE IDs does GHSA-j79r-9x96-ppx6 cover?

GHSA-j79r-9x96-ppx6 covers the following CVE IDs: CVE-2025-71417. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j79r-9x96-ppx6?

GHSA-j79r-9x96-ppx6 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-j79r-9x96-ppx6HighCVSS 6.5

PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in...

Vendor

GitHub Security Advisories

Published

September 9, 2026

Last Modified

September 9, 2026

🔗 CVE IDs covered (1)

CVE-2025-71417 →

📋 Description

PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUS_SEND_PACKS handling, allowing authenticated clients to trigger duplicate pack transmissions. Attackers can send multiple copies of valid pack UUIDs in a single packet to exhaust server memory and cause denial of service.

🔗 References (4)

https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-fqqv-56h5-f57g
https://nvd.nist.gov/vuln/detail/CVE-2025-71417
https://www.vulncheck.com/advisories/pocketmine-mp-before-5.32.1-denial-of-service-via-resourcepackclientresponsepacket
https://github.com/advisories/GHSA-j79r-9x96-ppx6