Denial-of-service vulnerabilities and fixes

Two security vulnerabilities enabling a denial-of-service attack have been discovered, both of which are related to networking. One of these is in my code and another is in a dependency.

The vulnerability in my code allows any client to craft and send a message to any game server to get the server stuck in an infinite loop. This effectively results in the server crashing as well as wasting CPU cycles. The vulnerability in the dependency can lead to memory exhaustion, and based on its security advisory, it seems to be easy to exploit.

Both these vulnerabilities have been fixed in Spaceships version 1.5.2. It is strongly recommended to update, especially if you're hosting a server!