CVE-2023-54393 [HIGH] – PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPac

PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server.