Skip to content
OpenAdvisories

Product · mpv-player

mpv

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-123095

    mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlines

    mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. Attackers controlling a feed or page can bypass url_is_safe() to…

    mpv-player mpv mpv mpv Debian Ubuntu