Links
Tags
Creators
Details
All versions
0.2.1
Alpha
Capture Spawn 0.2.15 months ago 13
Compatibility
Minecraft: Java Edition
26.1.x
1.21.x
Platforms
Bukkit
Paper
Purpur
Spigot
Changes
CaptureSpawn v0.2.1 — 更新日志
🐛 Bug 修复
- **修复了CSE-001 **
- 阻止了玩家通过"丢装备给怪物 → 捕捉 → 释放 → 击杀"循环来复制带有高附魔装备的漏洞
- 释放生物时,其
HandItems、ArmorItems、HandDropChances、ArmorDropChances、Attributes等 NBT 数据现已被清理,防止装备和掉落概率被继承 - 释放后的生物强制禁止捡起地上的物品(
CanPickUpLoot = false)
⚙️ 配置变更
release.consume-filled默认值从false改为true,释放生物后消耗精灵球,增加循环利用的经济成本
🧹 其他
- 优化了部分 debug 日志输出
| 项目 | 内容 |
|---|---|
| CVE 风格编号 | CSE-001 |
| 中文名 | 「附魔轮迴」漏洞 |
| 英文名 | Enchantment Carousel Exploit |
| 影响版本 | ≤ v0.2.0 |
| 修复版本 | v0.2.1 |
| 漏洞类型 | 装备复制 / 附魔放大 |
| 严重程度 | 🔴 高危 |
Projects on Modrinth are automatically available through a Maven repository for use with JVM build tools such as Gradle. To learn more about the Modrinth Maven API, click here.
Note: When available, you should use the creator's maven repo instead as it will have transitive dependency information that the Modrinth Maven API does not. You may also end up with duplicate dependencies if you use a mix of Modrinth and non-Modrinth Maven repositories for your dependencies, because the group identifier will be different when served through the Modrinth Maven API.
Maven coordinates:
Version ID:
build.gradle:
repositories {
exclusiveContent {
forRepository {
maven {
name = "Modrinth"
url = "https://api.modrinth.com/maven"
}
}
// forRepositories(fg.repository) // Uncomment when using ForgeGradle
filter {
includeGroup "maven.modrinth"
}
}
}
// Standard Gradle dependency
dependencies {
implementation "maven.modrinth:xI6wpDnA:kpB7Bb83"
}
// Legacy Loom dependency
dependencies {
modImplementation "maven.modrinth:xI6wpDnA:kpB7Bb83"
}

