CVE-2026-62968

The record

Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input can influence arguments passed to `yt-dlp` under specific conditions. Unintended command-line options may be interpreted by `yt-dlp`, potentially altering its behavior. This issue is fixed in version 1.8.2.

Affected packages

Related vulnerabilities

• CVE-2026-116252 pgAdmin 4's materialized view refresh passed the target database's name to psql's… CWE-88
• CVE-2026-111504 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization… CWE-88
• CVE-2026-119282 Nx is a monorepo solution for TypeScript and polyglot codebases. CWE-88
• CVE-2026-90868 An OS command injection vulnerability in Progress Software WS_FTP Server versions prior… CWE-88
• CVE-2026-90865 An OS command injection vulnerability in Progress Software WS_FTP Server versions prior… CWE-88
• CVE-2026-50056 A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra… CWE-88
• CVE-2026-115372 Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows… CWE-88
• CVE-2026-111813 Apache Traffic Server's experimental magick plugin lets an unauthenticated client control… CWE-88