Skip to content
This repository was archived by the owner on Jul 12, 2026. It is now read-only.

NeoEssentials v1.1.5 — Security Patches & Bug Fixes

Latest
Latest

Choose a tag to compare

View all tags
@XEXModz XEXModz released this 17 Jun 20:51
· 1 commit to main-latest since this release
v1.1.5
e3a1875
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security Fixes

  • /inv and /ec exploit — any player could open another player's inventory or ender chest, no permissions required. Also fixed a typo that broke /ecedit completely.
  • /pay duping — rapid-fire payment requests could bypass the cooldown and double-pay before it updated.
  • Permission list leak — any player could dump the full list of permission nodes via /neoessentials-permissions.

Bug Fixes

  • Chat config wouldn't load — missing .json extension broke it on every server start, silently falling back to defaults.
  • /motd lied about saving — showed "success" even when the file write failed, then reverted to no MOTD on next load.
  • FTB Ranks permissions were broken — wrong API calls meant every permission check silently failed.
  • Corrupted save files — Gson was mangling any saved text containing < > & into garbled unicode.
  • /back after death — death location wasn't reliably saved if another mod interfered with the death event.
Assets 3
Loading