tocsin

Debian/mpv: high 8.8

mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute wi

Action: Upgrade mpv to 0.27.0-3 or later.

Affected

introducedfixedlast affected
00.27.0-3-

Fixed versions

0.27.0-3

Sources

published · modified · JSON