v.1.4.0

This update fixes a vulnerability in the way BungeeGuard operates. It is important that you update. After updating, those with affected setups should also rotate the BungeeGuard token, in case malicious users have already obtained the previous token.

The fix only applies to the BungeeCord plugin part of BungeeGuard. It does not affect setups using Velocity proxies with the BungeeGuard Bukkit plugin.

More details can be found here: https://github.com/lucko/BungeeGuard/blob/master/SECURITY.md#002---2nd-june-2025

v1.3.3

Changelog: v1.3.2...v1.3.3

v1.3.2

Full Changelog: v1.3.1...v1.3.2

v1.3.1

• Updates ProtocolLib to support 1.19 on Spigot servers.

v1.3.0

• Updated to support BungeeCord 1.19.

⚠️ Note: If you want to use BungeeGuard on a pre-1.19 version of BungeeCord, you will need to download and use BungeeGuard v1.2.2

v1.2.2

• Increase handshake length limit to 2500

v1.2.1

• Optimise profile spoof logic in the Bungee plugin (only for users on Java 9+)
• Harden handshake verification - limit to 1000 characters
• Log original handshake using base64 to prevent console tricks

v1.2.0

• Fixes a security issue

v1.1.0

Bump version to 1.1

v1.0.0 (for Paper & BungeeCord 1.8 - 1.12)

Add support for proxies running in offline mode