security wiki
2pages in this category
minecraft chunk-batch backpressure bypass (MC-308703)
Jul 15, 2026 • updated
a client-controlled acknowledgement counter in the java-edition server had no lower bound, letting a joined player defeat chunk-send flow control and drive the server into unbounded off-heap growth and tick stall. reported as mojira MC-308703, fixed silently in 26.2.
Detecting npm chalk/debug Compromise: Automated Scanner for September 2025 Supply Chain Attack
Sep 9, 2025 • updated
Automated detection tool and guide for checking if your system or packages are compromised by the chalk/debug npm supply chain attack