Skip to content
Noroxi

minetest records

4 published records for vendor minetest.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 22
  2. 26

Bar: total · dark part: CISA KEV.

Attack profile

All records

4 records
  • Lua sandbox escape from mod in Minetest

    CriticalCVSS 10.0Proof of conceptEPSS 3%

    minetest · minetestAug 15, 2022

  • Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta

    CriticalCVSS 9.8No exploitEPSS 1%

    minetest · minetestFeb 2, 2022

  • Luanti has a mod security sandbox escape

    CriticalCVSS 9.0No exploitEPSS 0%

    minetest · minetestApr 23, 2026

  • In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.

    MediumCVSS 6.5No exploitEPSS 0%

    minetest · minetestFeb 2, 2022