MeteorDevelopment / meteor-client

Based Minecraft utility mod.
https://meteorclient.com
GNU General Public License v3.0
2.15k stars 797 forks source link

Translation exploit #4781

Closed SniperAwesome004 closed 1 month ago

SniperAwesome004 commented 1 month ago

Describe the feature

This mod uses Minecraft's default translation in src/main/resources/assets/meteor-client/lang which leaves the mod vulnerable to [MC-265322](https://bugs.mojang.com/browse/MC-265322) some other mods are of course patching this exploit out but there appears to be no effort here to fix this as of yet. I would hope you swap to a custom translation type or some other fix to avoid this issue and any other bypasses that get discovered.

Before submitting a suggestion

RacoonDog commented 1 month ago

exploit is already patched in meteor client image

see the source