[MEDIUM] Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP

PKSA-6y7g-ysy5-mk9f GHSA-h79x-98r2-g6qc

Affected package: pocketmine/pocketmine-mp

Affected version: >=3.0.0,<4.0.0

Reported by:
GitHub