Cpe:2.3:a:pocketmine:pocketmine_mp:*:*:*:*:*:*:*:*

PocketMine-MP versions prior to 3.26.5 and 4.0.5 are vulnerable to a denial-of-service attack due to insufficient validation of player-submitted skin data lengths.