From $URL: "The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack."
Upstream issue tracker: https://github.com/chocolate-doom/chocolate-doom/issues/1293
Same as others. Security team does not support GURU repo.