CVE-2022-51009 [HIGH] – PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comm

PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can send login or skin packets with invalid geometry JSON to trigger an unhandled RuntimeException, causing server crash.