High severityNVD Advisory· Published Oct 30, 2026
CVE-2026-62968
CVE-2026-62968
Description
Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input can influence arguments passed to yt-dlp under specific conditions. Unintended command-line options may be interpreted by yt-dlp, potentially altering its behavior. This issue is fixed in version 1.8.2.
Affected products
1- Range: 1.5.0 - 1.8.2
Patches
Vulnerability mechanics
References
5- github.com/arnodoelinger/dreamdisplays/blob/v1.10.0-preview.1/media/source/src/main/kotlin/com/dreamdisplays/media/source/youtube/YtDlp.ktnvd
- github.com/arnodoelinger/dreamdisplays/blob/v1.10.0-preview.1/media/source/src/main/kotlin/com/dreamdisplays/media/source/youtube/process/YtDlpClientRace.ktnvd
- github.com/arnodoelinger/dreamdisplays/commit/ee8702bdbebcb2eb562c8acfb55c6bc383943b94nvd
- github.com/arnodoelinger/dreamdisplays/releases/tag/v1.8.2nvd
- github.com/arnodoelinger/dreamdisplays/security/advisories/GHSA-5j65-hvgq-c585nvd
News mentions
0No linked articles in our index yet.