Search vulnerabilities

Results 1

Export CSV
CVE-2026-62968

Dream Displays has command-line argument injection in yt-dlp invocation

Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input can influence arguments passed to `yt-dlp` under specific conditions. Unintended command-line options may be interpreted by `yt-dlp`, potentially altering its behavior. This issue is fixed in version 1.8.2.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Products