mpv-player

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

mpv-player records in CISA KEV

No mpv-player vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-85477 CVE-2026-123095 · GHSA-8pc2-mgr8-m3xv

Playlist entry injection in mpv via ytdl_hook newlines

LOW 34

mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00494 Published 2026-11-05 Fixed in 0.42.0 CWE-93

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0