Threats affecting pkg:github/godotsteam/godotsteam

GodotSteam versions 4.17.0 through 4.23.2 contain an authentication bypass vulnerability where the software trusts a peer value of 1 to identify a player as the server. This flaw allows an attacker to forge a grant_gold(1000000) call, potentially granting unauthorized in-game currency.