Threats tagged 'ghsa-r2gq-fqfh-5gqm'

GodotSteam versions 4.17 through 4.23.2 have a vulnerability where the peer value of 1 is trusted to indicate the server. This allows an attacker to forge a grant_gold(1000000) call, potentially granting themselves a large amount of in-game currency.