Product
PocketMine-MP versions prior to 3.26.5 and 4.0.5 are vulnerable to a denial-of-service attack due to insufficient validation of player-submitted skin data lengths.