Skip to content
OpenAdvisories

Package · Debian

mopidy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-111925

    Mopidy before 4.0.5 Path Traversal via File Backend library.lookup

    Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dirs because FileLibraryProvider.lookup() lacks a containment check. Attackers can call core.library.lookup or core.trackl…

    Mopidy Mopidy mopidy mopidy Debian Ubuntu